CVE-2012-0191 | BDVDB-2026-50668 Detail

Description#

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ibm.com/support/docview.wss?uid=swg21575642
https://exchange.xforce.ibmcloud.com/vulnerabilities/72156

Exploit#

No public exploit known

History#

Version 12012-06-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.