PT-2010-3863 · Ibm · Ibm Lotus Connections

Publicado 2010-06-14 · Atualizado 2010-06-16 · CVE-2010-2277

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Connections versions 2.5.x before 2.5.0.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via various components, including the create or edit form in the Communities component, the verbiage field in the Bookmarks component, or unspecified vectors related to the Mobile Blogs component.

Recommendations For IBM Lotus Connections versions 2.5.x before 2.5.0.2, update to version 2.5.0.2 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2277

Produtos afetados

Ibm Lotus Connections

Referências · 7

• http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21431472 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2277 · Nota de Segurança
• http://secunia.com/advisories/40007 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/1281 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362 · Aviso do Fabricante