CVE-2012-0191

Published: Jun 22, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.

Affected (6)

Products: Ibm: Lotus Expeditor

Ibm

1 product

Lotus Expeditor

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Expeditor	Version 6.1.1
Ibm Lotus Expeditor	Version 6.1
Ibm Lotus Expeditor	Version 6.2.1
Ibm Lotus Expeditor	Version 6.2.2
Ibm Lotus Expeditor	Version 6.2.3
Ibm Lotus Expeditor	Version 6.2

Related CWEs

CWE-264

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21575642

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72156

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21575642

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72156

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.