Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2279
ibm
lotus connections
homepage component
cve-2010-2279
security
update
ssl
remote attack vectors
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when “forced SSL” is enabled, uses http for links, which has unspecified impact and remote attack vectors.
Affected configurations
Node
ibmlotus_connectionsMatch2.5.0
ORibmlotus_connectionsMatch2.5.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:lotus_connections | ibm lotus connections | eq | 2.5.0 |
| ibm:lotus_connections | ibm lotus connections | eq | 2.5.0.1 |
Related
prion
prion
Design/Logic Flaw
2010-06-15 14:30:00
nvd
nvd
CVE-2010-2279
2010-06-15 14:30:01
cvelist
cvelist
CVE-2010-2279
2022-10-03 16:21:07
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2010-2279