Unscored CVE-2012-5309 EUVD-2012-5232GHSA-pmwv-p724-cpcf

servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, whic…

Published Oct 8, 2012 · Updated Sep 17, 2024 · Assigned by mitre

Description

servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

References

20121001 BF, XSS, CSRF and Redirector vulnerabilities in IBM Lotus Notes Traveler mailing-list