CVE-2010-0921
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."
Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en IBM Lotus iNotes (alias Domino Web Access o DWA) en versiones anteriores a la 229.281 para Domino 8.0.2 FP4 permite a atacantes remotos secuestrar la autenticación de victímas al azar mediante vectores relacionados con la falta de "XSS/CSRF Get Filter and Referer Check fixes."
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-03-03 CVE Reserved
- 2010-03-03 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg27018109 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/38459 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56556 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2010/0496 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | <= 229.271 Search vendor "Ibm" for product "Lotus Inotes" and version " <= 229.271" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.011 Search vendor "Ibm" for product "Lotus Inotes" and version "229.011" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.021 Search vendor "Ibm" for product "Lotus Inotes" and version "229.021" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.031 Search vendor "Ibm" for product "Lotus Inotes" and version "229.031" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.041 Search vendor "Ibm" for product "Lotus Inotes" and version "229.041" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.051 Search vendor "Ibm" for product "Lotus Inotes" and version "229.051" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.061 Search vendor "Ibm" for product "Lotus Inotes" and version "229.061" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.101 Search vendor "Ibm" for product "Lotus Inotes" and version "229.101" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.111 Search vendor "Ibm" for product "Lotus Inotes" and version "229.111" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.131 Search vendor "Ibm" for product "Lotus Inotes" and version "229.131" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.141 Search vendor "Ibm" for product "Lotus Inotes" and version "229.141" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.151 Search vendor "Ibm" for product "Lotus Inotes" and version "229.151" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.161 Search vendor "Ibm" for product "Lotus Inotes" and version "229.161" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.171 Search vendor "Ibm" for product "Lotus Inotes" and version "229.171" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.181 Search vendor "Ibm" for product "Lotus Inotes" and version "229.181" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.191 Search vendor "Ibm" for product "Lotus Inotes" and version "229.191" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.201 Search vendor "Ibm" for product "Lotus Inotes" and version "229.201" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.211 Search vendor "Ibm" for product "Lotus Inotes" and version "229.211" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.221 Search vendor "Ibm" for product "Lotus Inotes" and version "229.221" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.231 Search vendor "Ibm" for product "Lotus Inotes" and version "229.231" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.241 Search vendor "Ibm" for product "Lotus Inotes" and version "229.241" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.251 Search vendor "Ibm" for product "Lotus Inotes" and version "229.251" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.261 Search vendor "Ibm" for product "Lotus Inotes" and version "229.261" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|