Lucene search

[email protected]CVE-2010-0715

HistoryFeb 26, 2010 - 7:30 p.m.

CVE-2010-0715

2010-02-2619:30:00

[email protected]

web.nvd.nist.gov

cve-2010-0715

open redirect

ibm

websphere portal

lotus

wcm

workplace

quickr

phishing attack

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.

Affected configurations

NVD

Node

ibmwebsphere_portalMatch5.1.0.0

ibmwebsphere_portalMatch5.1.0.1

ibmwebsphere_portalMatch5.1.0.2

ibmwebsphere_portalMatch5.1.0.3

ibmwebsphere_portalMatch5.1.0.4

ibmwebsphere_portalMatch5.1.0.5

ibmwebsphere_portalMatch6.0.0.0

ibmwebsphere_portalMatch6.0.0.1

ibmwebsphere_portalMatch6.0.0.2

ibmwebsphere_portalMatch6.0.0.3

ibmwebsphere_portalMatch6.0.0.4

ibmwebsphere_portalMatch6.0.1.0

ibmwebsphere_portalMatch6.0.1.1

ibmwebsphere_portalMatch6.0.1.2

ibmwebsphere_portalMatch6.0.1.3

ibmwebsphere_portalMatch6.0.1.4

ibmwebsphere_portalMatch6.0.1.5

ibmwebsphere_portalMatch6.0.1.6

ibmwebsphere_portalMatch6.0.1.7

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.0.1

ibmwebsphere_portalMatch6.1.0.2

ibmwebsphere_portalMatch6.1.0.3

ibmwebsphere_portalMatch6.1.5.0

Node

ibmlotus_web_content_managementMatch5.1.0.0

ibmlotus_web_content_managementMatch5.1.0.1

ibmlotus_web_content_managementMatch5.1.0.2

ibmlotus_web_content_managementMatch5.1.0.3

ibmlotus_web_content_managementMatch5.1.0.4

ibmlotus_web_content_managementMatch5.1.0.5

ibmlotus_web_content_managementMatch6.0.0.0

ibmlotus_web_content_managementMatch6.0.0.1

ibmlotus_web_content_managementMatch6.0.0.2

ibmlotus_web_content_managementMatch6.0.0.3

ibmlotus_web_content_managementMatch6.0.0.4

ibmlotus_web_content_managementMatch6.0.1.0

ibmlotus_web_content_managementMatch6.0.1.1

ibmlotus_web_content_managementMatch6.0.1.2

ibmlotus_web_content_managementMatch6.0.1.3

ibmlotus_web_content_managementMatch6.0.1.4

ibmlotus_web_content_managementMatch6.0.1.5

ibmlotus_web_content_managementMatch6.0.1.6

ibmlotus_web_content_managementMatch6.0.1.7

ibmlotus_web_content_managementMatch6.1.0.0

ibmlotus_web_content_managementMatch6.1.0.1

ibmlotus_web_content_managementMatch6.1.0.2

ibmlotus_web_content_managementMatch6.1.0.3

ibmlotus_web_content_managementMatch6.1.5.0

Node

ibmlotus_workplace_web_content_managementMatch5.1.0.0

ibmlotus_workplace_web_content_managementMatch5.1.0.1

ibmlotus_workplace_web_content_managementMatch5.1.0.2

ibmlotus_workplace_web_content_managementMatch5.1.0.3

ibmlotus_workplace_web_content_managementMatch5.1.0.4

ibmlotus_workplace_web_content_managementMatch5.1.0.5

ibmlotus_workplace_web_content_managementMatch6.0.0.0

ibmlotus_workplace_web_content_managementMatch6.0.0.1

ibmlotus_workplace_web_content_managementMatch6.0.0.2

ibmlotus_workplace_web_content_managementMatch6.0.0.3

ibmlotus_workplace_web_content_managementMatch6.0.0.4

ibmlotus_workplace_web_content_managementMatch6.0.1.0

ibmlotus_workplace_web_content_managementMatch6.0.1.1

ibmlotus_workplace_web_content_managementMatch6.0.1.2

ibmlotus_workplace_web_content_managementMatch6.0.1.3

ibmlotus_workplace_web_content_managementMatch6.0.1.4

ibmlotus_workplace_web_content_managementMatch6.0.1.5

ibmlotus_workplace_web_content_managementMatch6.0.1.6

ibmlotus_workplace_web_content_managementMatch6.0.1.7

ibmlotus_workplace_web_content_managementMatch6.1.0.0

ibmlotus_workplace_web_content_managementMatch6.1.0.1

ibmlotus_workplace_web_content_managementMatch6.1.0.2

ibmlotus_workplace_web_content_managementMatch6.1.0.3

ibmlotus_workplace_web_content_managementMatch6.1.5.0

Node

ibmlotus_quickrMatch8.0

ibmlotus_quickrMatch8.0.0.2

ibmlotus_quickrMatch8.1

ibmlotus_quickrMatch8.1.1

ibmlotus_quickrMatch8.1.1.1

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq5.1.0.0
ibm:websphere_portalibm websphere portaleq5.1.0.1
ibm:websphere_portalibm websphere portaleq5.1.0.2
ibm:websphere_portalibm websphere portaleq5.1.0.3
ibm:websphere_portalibm websphere portaleq5.1.0.4
ibm:websphere_portalibm websphere portaleq5.1.0.5
ibm:websphere_portalibm websphere portaleq6.0.0.0
ibm:websphere_portalibm websphere portaleq6.0.0.1
ibm:websphere_portalibm websphere portaleq6.0.0.2
ibm:websphere_portalibm websphere portaleq6.0.0.3

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.0
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.1
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.2
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.3
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.4
ibm:websphere_portal	ibm websphere portal	eq	5.1.0.5
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.1
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.2
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.3

Rows per page:

1-10 of 241

References

www-01.ibm.com/support/docview.wss?uid=swg21421469

www.hacktics.com/content/advisories/AdvIBM20100224.html

www.securityfocus.com/archive/1/509744/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/56602

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

Related for CVE-2010-0715

cvelist1 nvd1 prion1