Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
| Software | From | Fixed in |
|---|---|---|
| ibm / sterling_control_center | 5.4.0.1 | 5.4.0.1.x |
| ibm / sterling_control_center | 5.4.0 | 5.4.0.x |
| ibm / sterling_control_center | 5.4.1.0 | 5.4.1.0.x |