6.8
CVE-2010-0921
- EPSS 0.58%
- Veröffentlicht 03.03.2010 19:30:00
- Zuletzt bearbeitet 16.06.2026 23:17:08
- Erkennungen
LoginCross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Inotes Version <= 229.271
Ibm ≫ Lotus Inotes Version 229.011
Ibm ≫ Lotus Inotes Version 229.021
Ibm ≫ Lotus Inotes Version 229.031
Ibm ≫ Lotus Inotes Version 229.041
Ibm ≫ Lotus Inotes Version 229.051
Ibm ≫ Lotus Inotes Version 229.061
Ibm ≫ Lotus Inotes Version 229.101
Ibm ≫ Lotus Inotes Version 229.111
Ibm ≫ Lotus Inotes Version 229.131
Ibm ≫ Lotus Inotes Version 229.141
Ibm ≫ Lotus Inotes Version 229.151
Ibm ≫ Lotus Inotes Version 229.161
Ibm ≫ Lotus Inotes Version 229.171
Ibm ≫ Lotus Inotes Version 229.181
Ibm ≫ Lotus Inotes Version 229.191
Ibm ≫ Lotus Inotes Version 229.201
Ibm ≫ Lotus Inotes Version 229.211
Ibm ≫ Lotus Inotes Version 229.221
Ibm ≫ Lotus Inotes Version 229.231
Ibm ≫ Lotus Inotes Version 229.241
Ibm ≫ Lotus Inotes Version 229.251
Ibm ≫ Lotus Inotes Version 229.261
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.58% | 0.431 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
http://www-01.ibm.com/support/docview.wss?uid=swg27018109
http://www.securityfocus.com/bid/38459
http://www.vupen.com/english/advisories/2010/0496
https://exchange.xforce.ibmcloud.com/vulnerabilities/56556