IBM Lotus Connections Multiple Remote Vulnerabilities
BID:31989
Info
IBM Lotus Connections Multiple Remote Vulnerabilities
| Bugtraq ID: | 31989 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-4807 CVE-2008-4808 CVE-2008-4809 CVE-2008-4805 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 29 2008 12:00AM |
| Updated: | Jul 05 2016 10:01PM |
| Credit: | IBM |
| Vulnerable: |
IBM Lotus Connections 2.0 |
| Not Vulnerable: |
IBM Lotus Connections 2.0.1 |
Discussion
IBM Lotus Connections Multiple Remote Vulnerabilities
IBM Lotus Connections is prone to multiple vulnerabilities, including cross-site scripting, SQL-injection, information-disclosure, and other unspecified issues.
Exploiting these vulnerabilities could allow an attacker to obtain sensitive information, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to IBM Lotus Connections 2.0.1 are vulnerable.
IBM Lotus Connections is prone to multiple vulnerabilities, including cross-site scripting, SQL-injection, information-disclosure, and other unspecified issues.
Exploiting these vulnerabilities could allow an attacker to obtain sensitive information, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to IBM Lotus Connections 2.0.1 are vulnerable.
Exploit / POC
IBM Lotus Connections Multiple Remote Vulnerabilities
An attacker can exploit these issues via a browser. To exploit some of these issues, the attacker must entice an unsuspecting victim into following a malicious URI.
An attacker can exploit these issues via a browser. To exploit some of these issues, the attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
IBM Lotus Connections Multiple Remote Vulnerabilities
Solution:
The vendor has released fixes to address the issues. Please see the references for more information.
Solution:
The vendor has released fixes to address the issues. Please see the references for more information.
References
IBM Lotus Connections Multiple Remote Vulnerabilities
References:
References: