CVE-2012-4824

2022-10-0316:15:33

CWE-20

[email protected]

web.nvd.nist.gov

cve-2012-4824

open redirect

servlet

traveler

ibm lotus notes

security vulnerability

phishing attack

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.7%

JSON

Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter.

Affected configurations

NVD

Node

ibmlotus_notes_travelerMatch8.5.3

ibmlotus_notes_travelerMatch8.5.3.1

ibmlotus_notes_travelerMatch8.5.3.2

ibmlotus_notes_travelerMatch8.5.3.3

CPENameOperatorVersion
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3.1
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3.2
ibm:lotus_notes_traveleribm lotus notes travelereq8.5.3.3

CPE	Name	Operator	Version
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3.1
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3.2
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	8.5.3.3