CVE-2013-0489: CSRF
Published Mar 27, 2013
·Updated
Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators.
Affected Software
16 affected components
IBM Lotus Domino=8.5.0
IBM Lotus Domino=8.5.0.1
IBM Lotus Domino=8.5.1
IBM Lotus Domino=8.5.1.1
IBM Lotus Domino=8.5.1.2
IBM Lotus Domino=8.5.1.3
IBM Lotus Domino=8.5.1.4
IBM Lotus Domino=8.5.1.5
IBM Lotus Domino=8.5.2.0
IBM Lotus Domino=8.5.2.1
IBM Lotus Domino=8.5.2.2
IBM Lotus Domino=8.5.2.3
IBM Lotus Domino=8.5.2.4
IBM Lotus Domino=8.5.3.0
IBM Lotus Domino=8.5.3.1
IBM Lotus Domino=8.5.3.2
Event History
Mar 27, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0489?
CVE-2013-0489 is considered a high severity vulnerability due to its potential for exploitation through cross-site request forgery.
2
How do I fix CVE-2013-0489?
To fix CVE-2013-0489, upgrade your IBM Lotus Domino installation to the latest patched version provided by IBM.
3
What products are affected by CVE-2013-0489?
CVE-2013-0489 affects IBM Lotus Domino versions 8.5.0 through 8.5.3.2.
4
Who can exploit CVE-2013-0489?
CVE-2013-0489 can be exploited by remote authenticated users to hijack administrator sessions.
5
What type of vulnerability is CVE-2013-0489?
CVE-2013-0489 is a cross-site request forgery (CSRF) vulnerability.