Lucene search
HistoryMar 03, 2010 - 7:30 p.m.
CVE-2010-0921
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
44.9%
Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of “XSS/CSRF Get Filter and Referer Check fixes.”
Affected configurations
Node
ibmlotus_inotesRange≤229.271
ORibmlotus_inotesMatch229.011
ORibmlotus_inotesMatch229.021
ORibmlotus_inotesMatch229.031
ORibmlotus_inotesMatch229.041
ORibmlotus_inotesMatch229.051
ORibmlotus_inotesMatch229.061
ORibmlotus_inotesMatch229.101
ORibmlotus_inotesMatch229.111
ORibmlotus_inotesMatch229.131
ORibmlotus_inotesMatch229.141
ORibmlotus_inotesMatch229.151
ORibmlotus_inotesMatch229.161
ORibmlotus_inotesMatch229.171
ORibmlotus_inotesMatch229.181
ORibmlotus_inotesMatch229.191
ORibmlotus_inotesMatch229.201
ORibmlotus_inotesMatch229.211
ORibmlotus_inotesMatch229.221
ORibmlotus_inotesMatch229.231
ORibmlotus_inotesMatch229.241
ORibmlotus_inotesMatch229.251
ORibmlotus_inotesMatch229.261
ibmlotus_dominoMatch8.0.2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_inotes | * | cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.011 | cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.021 | cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.031 | cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.041 | cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.051 | cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.061 | cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.101 | cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.111 | cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.131 | cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2010-03-03 19:30:00
cvelist
cvelist
CVE-2010-0921
2010-03-03 19:00:00
cve
cve
CVE-2010-0921
2010-03-03 19:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
44.9%
Related for NVD:CVE-2010-0921