Lucene search

[email protected]CVE-2010-0276

HistoryJan 09, 2010 - 6:30 p.m.

CVE-2010-0276

2010-01-0918:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

ibm lotus inotes

domino web access

dwa

cve-2010-0276

nvd

security

vulnerability

exploit

ibm

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.5%

JSON

IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the “Try Lotus iNotes anyway” link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.

CPENameOperatorVersion
ibm:domino_web_accessibm domino web accesseq*
ibm:lotus_inotesibm lotus inoteseq*
ibm:lotus_dominoibm lotus dominoeq8.0.2.3

CPE	Name	Operator	Version
ibm:domino_web_access	ibm domino web access	eq	*
ibm:lotus_inotes	ibm lotus inotes	eq	*
ibm:lotus_domino	ibm lotus domino	eq	8.0.2.3

References

secunia.com/advisories/38026

www-01.ibm.com/support/docview.wss?uid=swg27017776

www.securityfocus.com/bid/37675

www.vupen.com/english/advisories/2010/0077

exchange.xforce.ibmcloud.com/vulnerabilities/55473

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.5%

JSON

Related for CVE-2010-0276

prion1 cvelist1