Lucene search

[email protected]CVE-2012-5308

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5308

2022-10-0316:15:32

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-5308

csrf

vulnerability

ibm lotus notes traveler

hijack authentication

problem reports

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.4%

JSON

Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action.

Affected configurations

NVD

Node

ibmlotus_notes_travelerMatch8.5.0.0

ibmlotus_notes_travelerMatch8.5.0.1

ibmlotus_notes_travelerMatch8.5.0.2

ibmlotus_notes_travelerMatch8.5.1.1

ibmlotus_notes_travelerMatch8.5.1.2

ibmlotus_notes_travelerMatch8.5.1.3

ibmlotus_notes_travelerMatch8.5.2.1

ibmlotus_notes_travelerMatch8.5.3

ibmlotus_notes_travelerMatch8.5.3.1

ibmlotus_notes_travelerMatch8.5.3.2

ibmlotus_notes_travelerMatch8.5.3.3

ibmlotus_notes_travelerMatch8.5.3.3interim_fix_1

CPENameOperatorVersion
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.0.0
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.0.1
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.0.2
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.1.1
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.1.2
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.1.3
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.2.1
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3.1
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3.2

CPE	Name	Operator	Version
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.0.0
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.0.1
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.0.2
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.1.1
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.1.2
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.1.3
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.2.1
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3.1
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3.2

Rows per page:

1-10 of 111

References

archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.4%

JSON

Related for CVE-2012-5308

nvd1 prion1 cvelist1