4

CVE-2010-2278

EPSS 0.69%
Veröffentlicht 15.06.2010 14:30:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Lotus Connections Version2.5.0

Ibm ≫ Lotus Connections Version2.5.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.69%	0.694

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	4.9	4.9	AV:N/AC:H/Au:N/C:P/I:P/A:N

http://secunia.com/advisories/40007

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21431472

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1281

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47429

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47496

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47501

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47610

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47642

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47669

https://nvd.nist.gov/vuln/detail/CVE-2010-2278

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2278

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2278

EUVD