IBM Lotus Connections Multiple Vulnerabilities
BID:40445
Info
IBM Lotus Connections Multiple Vulnerabilities
| Bugtraq ID: | 40445 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2010 12:00AM |
| Updated: | May 28 2010 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Lotus Connections 2.5 |
| Not Vulnerable: |
IBM Lotus Connections 2.5.0.2 |
Discussion
IBM Lotus Connections Multiple Vulnerabilities
IBM Lotus Connections is prone to multiple vulnerabilities.
An attacker may leverage these issues to disclose potentially sensitive information, perform spoofing and phishing attacks and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
These issues affect Lotus Connections prior to 2.5.0 Fix Pack 2 (2.5.0.2).
IBM Lotus Connections is prone to multiple vulnerabilities.
An attacker may leverage these issues to disclose potentially sensitive information, perform spoofing and phishing attacks and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
These issues affect Lotus Connections prior to 2.5.0 Fix Pack 2 (2.5.0.2).
Exploit / POC
IBM Lotus Connections Multiple Vulnerabilities
Attackers can exploit these issues using standard tools.
Attackers can exploit these issues using standard tools.
Solution / Fix
IBM Lotus Connections Multiple Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
IBM Lotus Connections Multiple Vulnerabilities
References:
References: