PT-2012-5596 · Ibm · Ibm Lotus Notes Traveler

Published 2012-10-08 · Updated 2012-10-08 · CVE-2012-4824

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler version 8.5.3

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter. This can be exploited by including a malicious URL in the redirectURL parameter.

Recommendations For IBM Lotus Notes Traveler version 8.5.3, update to 8.5.3.3 Interim Fix 1 to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-4824

Affected Products

Ibm Lotus Notes Traveler

References · 4

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4824 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21612229 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4824 · Note