PT-2010-2644 · Ibm · Ibm Lotus Notes

Publicado 2010-03-03 · Atualizado 2017-08-17 · CVE-2010-0921

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Lotus iNotes versions prior to 229.281 for Domino 8.0.2 FP4

Description A cross-site request forgery (CSRF) issue exists due to the lack of "XSS/CSRF Get Filter and Referer Check fixes." This allows remote attackers to hijack the authentication of victims.

Recommendations For versions prior to 229.281 for Domino 8.0.2 FP4, update to version 229.281 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2010-0921

Produtos afetados

Ibm Lotus Notes

Referências · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg27018109 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0921 · Nota
• http://securityfocus.com/bid/38459 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0921 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56556 · Nota
• http://vupen.com/english/advisories/2010/0496 · Aviso do Fabricante