CVE-2010-2279 — IBM Lotus Connections vulnerability

3 documents3 sources
Severity
7.6HIGHNVD
EPSS
0.5%
top 34.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Connections
Timeline
PublishedJun 15
Latest updateMay 17

Description

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/lotus_connections2.5.0, 2.5.0.1+1

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r5g6-h9r4-8fp4: The Top Updates implementation in the Homepage component in IBM Lotus Connections 2↗2022-05-17
▶
CVEList
CVE-2010-2279: The Top Updates implementation in the Homepage component in IBM Lotus Connections 2↗2010-06-14
▶
CVE-2010-2279 — IBM Lotus Connections vulnerability | cvebase