NVD

Id
15840  
Name
CVE-2010-4591  
Description
The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-22  
Modified Date
2011-01-11  
Seq
2010-4591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89818 15840 CVE-2010-4591 IZ74393  View
89819 15840 CVE-2010-4591 http://www-01.ibm.com/support/docview.wss?uid=swg27020327  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37749 JVNDB-2010-003534 IBM LMC の Connection Manager におけるアクセスを取得される脆弱性 IBM Lotus Mobile Connect (LMC) の Connection Manager は、HTTP Access Services (HTTP-AS) が有効になっている際、iNotes ログオフボタン使用に対し、LTPA トークンを削除しないため、アクセスを取得される脆弱性が存在します。 CVE-2010-4591 47171 CVE-2010-4591 15840 4.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003534.html 2010-04-09 2012-03-27 View