Vulnerability Description
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
CVSS Score
7.6
HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Lotus Connections | 2.5.0 |
References
- http://secunia.com/advisories/40007Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472PatchVendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325
- http://www.vupen.com/english/advisories/2010/1281Vendor Advisory
- http://secunia.com/advisories/40007Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472PatchVendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325
- http://www.vupen.com/english/advisories/2010/1281Vendor Advisory
FAQ
What is CVE-2010-2279?
CVE-2010-2279 is a vulnerability with a CVSS score of 7.6 (HIGH). The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attac...
How severe is CVE-2010-2279?
CVE-2010-2279 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-2279?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Lotus Connections.