medium5.0
CVE-2012-0191
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remot…
Impact
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Expeditor | Versions 6.1, 6.1.1, 6.2, 6.2.1, 6.2.2, 6.2.3 |