Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0921

Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Published

2010-03-03T19:30:00.820

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm lotus_inotes ≤ 229.271 Yes
Application ibm lotus_inotes 229.011 Yes
Application ibm lotus_inotes 229.021 Yes
Application ibm lotus_inotes 229.031 Yes
Application ibm lotus_inotes 229.041 Yes
Application ibm lotus_inotes 229.051 Yes
Application ibm lotus_inotes 229.061 Yes
Application ibm lotus_inotes 229.101 Yes
Application ibm lotus_inotes 229.111 Yes
Application ibm lotus_inotes 229.131 Yes
Application ibm lotus_inotes 229.141 Yes
Application ibm lotus_inotes 229.151 Yes
Application ibm lotus_inotes 229.161 Yes
Application ibm lotus_inotes 229.171 Yes
Application ibm lotus_inotes 229.181 Yes
Application ibm lotus_inotes 229.191 Yes
Application ibm lotus_inotes 229.201 Yes
Application ibm lotus_inotes 229.211 Yes
Application ibm lotus_inotes 229.221 Yes
Application ibm lotus_inotes 229.231 Yes
Application ibm lotus_inotes 229.241 Yes
Application ibm lotus_inotes 229.251 Yes
Application ibm lotus_inotes 229.261 Yes
Application ibm lotus_domino 8.0.2.4 No
References