Cross site request forgery (csrf)

2010-12-1620:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.6%

JSON

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request.

CPENameOperatorVersion
lotus_notes_travelereq8.5.0.0
lotus_notes_travelerle8.5.1.1
lotus_notes_travelereq8.5.0.2
lotus_notes_travelereq8.0.1.3
lotus_notes_travelereq8.0.1
lotus_notes_travelereq8.0.1.2
lotus_notes_travelereq8.0
lotus_notes_travelereq8.5.0.1

Name	Operator	Version
lotus_notes_traveler	eq	8.5.0.0
lotus_notes_traveler	le	8.5.1.1
lotus_notes_traveler	eq	8.5.0.2
lotus_notes_traveler	eq	8.0.1.3
lotus_notes_traveler	eq	8.0.1
lotus_notes_traveler	eq	8.0.1.2
lotus_notes_traveler	eq	8.0
lotus_notes_traveler	eq	8.5.0.1