CVE-2023-23957 Redirection Vulnerability in Symantec Identity Portal

Products

• CA Identity Suite
• CA Identity Portal

Issue/Introduction

Redirect could be made to attacker site using link to Identity Portal login page - CVE-2023-23957 Page.

Environment

Identity Portal 14.5 and newer.

Resolution

Hotfix DE646210 was provided to fix this issue.

Please reach out to the support to receive the fix.

Hotfix will be part of next CHF or SP for 14.5.