6.8

CVE-2010-0715

Exploit
Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Portal Version 5.1.0.0
Ibm ≫ Websphere Portal Version 5.1.0.1
Ibm ≫ Websphere Portal Version 5.1.0.2
Ibm ≫ Websphere Portal Version 5.1.0.3
Ibm ≫ Websphere Portal Version 5.1.0.4
Ibm ≫ Websphere Portal Version 5.1.0.5
Ibm ≫ Websphere Portal Version 6.0.0.0
Ibm ≫ Websphere Portal Version 6.0.0.1
Ibm ≫ Websphere Portal Version 6.0.0.2
Ibm ≫ Websphere Portal Version 6.0.0.3
Ibm ≫ Websphere Portal Version 6.0.0.4
Ibm ≫ Websphere Portal Version 6.0.1.0
Ibm ≫ Websphere Portal Version 6.0.1.1
Ibm ≫ Websphere Portal Version 6.0.1.2
Ibm ≫ Websphere Portal Version 6.0.1.3
Ibm ≫ Websphere Portal Version 6.0.1.4
Ibm ≫ Websphere Portal Version 6.0.1.5
Ibm ≫ Websphere Portal Version 6.0.1.6
Ibm ≫ Websphere Portal Version 6.0.1.7
Ibm ≫ Websphere Portal Version 6.1.0.0
Ibm ≫ Websphere Portal Version 6.1.0.1
Ibm ≫ Websphere Portal Version 6.1.0.2
Ibm ≫ Websphere Portal Version 6.1.0.3
Ibm ≫ Websphere Portal Version 6.1.5.0
Ibm ≫ Lotus Web Content Management Version 5.1.0.0
Ibm ≫ Lotus Web Content Management Version 5.1.0.1
Ibm ≫ Lotus Web Content Management Version 5.1.0.2
Ibm ≫ Lotus Web Content Management Version 5.1.0.3
Ibm ≫ Lotus Web Content Management Version 5.1.0.4
Ibm ≫ Lotus Web Content Management Version 5.1.0.5
Ibm ≫ Lotus Web Content Management Version 6.0.0.0
Ibm ≫ Lotus Web Content Management Version 6.0.0.1
Ibm ≫ Lotus Web Content Management Version 6.0.0.2
Ibm ≫ Lotus Web Content Management Version 6.0.0.3
Ibm ≫ Lotus Web Content Management Version 6.0.0.4
Ibm ≫ Lotus Web Content Management Version 6.0.1.0
Ibm ≫ Lotus Web Content Management Version 6.0.1.1
Ibm ≫ Lotus Web Content Management Version 6.0.1.2
Ibm ≫ Lotus Web Content Management Version 6.0.1.3
Ibm ≫ Lotus Web Content Management Version 6.0.1.4
Ibm ≫ Lotus Web Content Management Version 6.0.1.5
Ibm ≫ Lotus Web Content Management Version 6.0.1.6
Ibm ≫ Lotus Web Content Management Version 6.0.1.7
Ibm ≫ Lotus Web Content Management Version 6.1.0.0
Ibm ≫ Lotus Web Content Management Version 6.1.0.1
Ibm ≫ Lotus Web Content Management Version 6.1.0.2
Ibm ≫ Lotus Web Content Management Version 6.1.0.3
Ibm ≫ Lotus Web Content Management Version 6.1.5.0
Ibm ≫ Lotus Quickr Version 8.0
Ibm ≫ Lotus Quickr Version 8.0.0.2
Ibm ≫ Lotus Quickr Version 8.1
Ibm ≫ Lotus Quickr Version 8.1.1
Ibm ≫ Lotus Quickr Version 8.1.1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.669
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21421469
Patch
Vendor Advisory
http://www.hacktics.com/content/advisories/AdvIBM20100224.html
Exploit
http://www.securityfocus.com/archive/1/509744/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/56602