// For flags

CVE-2012-5308

 

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action.

Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en servlet/traveler en IBM Lotus Notes Traveler hasta la v8.5.3.3 Interim Fix 1, permite a atacantes remotos secuestrar la autenticación de los usuarios para peticiones de creación de resúmenes de problemas a través de la subida de una acción getReportProblem.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-10-08 CVE Reserved
  • 2012-10-08 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-16 First Exploit
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.0.0
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.0.0"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.0.1
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.0.1"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.0.2
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.0.2"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.1.1
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.1.1"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.1.2
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.1.2"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.1.3
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.1.3"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.2.1
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.2.1"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.3
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.3"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.3.1
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.3.1"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.3.2
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.3.2"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.3.3
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.3.3"
-
Affected
Ibm
Search vendor "Ibm"
Lotus Notes Traveler
Search vendor "Ibm" for product "Lotus Notes Traveler"
8.5.3.3
Search vendor "Ibm" for product "Lotus Notes Traveler" and version "8.5.3.3"
interim_fix_1
Affected