Description
IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.
References
- http://www.ibm.com/support/docview.wss?uid=swg21462435
- 70931 vdb-entry
- ADV-2011-0382 vdb-entry
- 43298 third-party-advisory
- PK54565 vendor-advisory