Description
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.
Unscored
CVE-2012-0191
EUVD-2012-0229GHSA-qr96-4rrh-jjfm
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests…
Published Jun 22, 2012 · Updated Aug 6, 2024 · Assigned by ibm