5
CVE-2012-0191
- EPSS 1.03%
- Veröffentlicht 22.06.2012 10:24:05
- Zuletzt bearbeitet 16.06.2026 23:36:52
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginThe web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Expeditor Version6.1
Ibm ≫ Lotus Expeditor Version6.1.1
Ibm ≫ Lotus Expeditor Version6.2
Ibm ≫ Lotus Expeditor Version6.2.1
Ibm ≫ Lotus Expeditor Version6.2.2
Ibm ≫ Lotus Expeditor Version6.2.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.03% | 0.593 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://www.ibm.com/support/docview.wss?uid=swg21575642
https://exchange.xforce.ibmcloud.com/vulnerabilities/72156