Open Redirect in Axivion Dashboard

Executive Summary

This vulnerability is an Open Redirect issue in the OAuth/OIDC authentication of the Axivion Dashboard. The login flow fails to restrict post-authentication redirects to the application's own domain. Attackers can craft malicious login links that redirect users to untrusted external sites after authentication, potentially enabling phishing attacks or credential theft.

Useful 0 Not Useful 0

Detection Guidance

Check for unusual redirect URLs in OAuth/OIDC login flows by inspecting network traffic during authentication. Look for post-authentication redirects to external domains. Review server logs for repeated failed login attempts or unexpected redirect patterns.

Useful 0 Not Useful 0

Impact Analysis

If you follow a crafted login link, you could be redirected to a fake but convincing look-alike page after authenticating. This could trick you into entering credentials or second-factor details, which attackers can then steal. It requires you to follow the malicious link and complete the authentication process.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling phishing attacks that steal credentials or second-factor authentication. If exploited, attackers may gain unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Axivion Dashboard to the latest patched version. Configure strict allowlists for post-authentication redirects to only trusted origins. Disable OAuth/OIDC if not required. Monitor for suspicious login activity.

Useful 0 Not Useful 0