CVE-2011-1032

EUVD-2011-1048
IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
ibmlotus_connections
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/70931
http://secunia.com/advisories/43298
http://www-01.ibm.com/support/docview.wss?uid=swg1PK54565
http://www.ibm.com/support/docview.wss?uid=swg21462435
http://www.vupen.com/english/advisories/2011/0382
http://osvdb.org/70931
http://secunia.com/advisories/43298
http://www-01.ibm.com/support/docview.wss?uid=swg1PK54565
http://www.ibm.com/support/docview.wss?uid=swg21462435
http://www.vupen.com/english/advisories/2011/0382