Skip to content
OpenAdvisories
Unscored CVE-2010-4595 EUVD-2010-4561GHSA-4h39-mpm2-2r6p

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access …

Published Dec 22, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.

References