Vulnerability in IBM Lotus Connections

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Lotus_connections — versions 2.5.0.1, 2.5.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)