PT-2012-5596 · Ibm · Ibm Lotus Notes Traveler

Publicado 2012-10-08 · Atualizado 2012-10-08 · CVE-2012-4824

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler version 8.5.3

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter. This can be exploited by including a malicious URL in the redirectURL parameter.

Recommendations For IBM Lotus Notes Traveler version 8.5.3, update to 8.5.3.3 Interim Fix 1 to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-4824

Produtos afetados

Ibm Lotus Notes Traveler

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4824 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4824 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21612229 · Aviso do Fabricante