PT-2010-5562 · Ibm · Ibm Lotus Mobile Connect

Publicado 2010-12-22 · Atualizado 2010-12-27 · CVE-2010-4595

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Mobile Connect versions prior to 6.1.4

Description The issue concerns the Connection Manager in IBM Lotus Mobile Connect, which fails to properly enforce access restrictions for HTTP Access Services. This allows remote attackers to bypass intended restrictions by sending an HTTP request with a disallowed User-Agent header.

Recommendations For versions prior to 6.1.4, update to version 6.1.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-4595

Produtos afetados

Ibm Lotus Mobile Connect

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg27020327 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4595 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ86207 · Aviso do Fabricante