Unrated severityNVD Advisory· Published Jun 22, 2012· Updated Apr 29, 2026
CVE-2012-0191
CVE-2012-0191
Description
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.
Affected products
6cpe:2.3:a:ibm:lotus_expeditor:6.1:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ibm:lotus_expeditor:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_expeditor:6.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_expeditor:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_expeditor:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_expeditor:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_expeditor:6.2.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.ibm.com/support/docview.wssnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/72156nvd
News mentions
0No linked articles in our index yet.