CVE-2010-0921

Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."
CSRF
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
ibmlotus_inotes
𝑥
≤ 229.271
ibmlotus_inotes
229.011
ibmlotus_inotes
229.021
ibmlotus_inotes
229.031
ibmlotus_inotes
229.041
ibmlotus_inotes
229.051
ibmlotus_inotes
229.061
ibmlotus_inotes
229.101
ibmlotus_inotes
229.111
ibmlotus_inotes
229.131
ibmlotus_inotes
229.141
ibmlotus_inotes
229.151
ibmlotus_inotes
229.161
ibmlotus_inotes
229.171
ibmlotus_inotes
229.181
ibmlotus_inotes
229.191
ibmlotus_inotes
229.201
ibmlotus_inotes
229.211
ibmlotus_inotes
229.221
ibmlotus_inotes
229.231
ibmlotus_inotes
229.241
ibmlotus_inotes
229.251
ibmlotus_inotes
229.261
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg27018109
http://www.securityfocus.com/bid/38459
http://www.vupen.com/english/advisories/2010/0496
https://exchange.xforce.ibmcloud.com/vulnerabilities/56556