Lucene search

K
nvd[email protected]NVD:CVE-2011-1032
HistoryFeb 15, 2011 - 1:00 a.m.

CVE-2011-1032

2011-02-1501:00:01
CWE-264
web.nvd.nist.gov
2

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0.003

Percentile

69.0%

IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.

Affected configurations

Nvd
Node
ibmlotus_connectionsMatch3.0
AND
ibmwebsphere_application_serverMatch7.0.0.11
VendorProductVersionCPE
ibmlotus_connections3.0cpe:2.3:a:ibm:lotus_connections:3.0:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.11cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0.003

Percentile

69.0%

Related for NVD:CVE-2011-1032