« Volver al listado

CVE-2012-0191

Estado: ModificadaMedia (5)—

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Lotus Expeditor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0191",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-06-22T10:24:05.973",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21575642",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72156",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21575642",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72156",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers."
    },
    {
      "lang": "es",
      "value": "El contenedor web de IBM Lotus Expeditor v6.1.x y v6.2.x antes de v6.2 FP5+Security Pack no  realiza correctamente el control de acceso para las solicitudes, lo que permite a atacantes remotos falsificar una petición de un origen de localhost a través de cabeceras manipuladas."
    }
  ],
  "lastModified": "2026-06-16T23:36:52.087",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C55D3363-5C70-4AF9-BF41-6BC61D96DBEB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5F93FBE-E5FB-43D9-A9B2-8178C17F2191"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BB245BB-9D7E-4B4A-BEE1-37A652C49678"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD812F25-5D99-4F5E-A2EA-5B1DF7DB9AB5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C01A8CD9-7726-43C3-9C38-2035E79F294A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_expeditor:6.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0AC20A0-9FD8-4F30-89A1-34F81566F6C8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}