CVE-2012-0191

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-22 · updated 2026-06-16
Weakness: CWE-264

Description

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.

Affected products

IBM Lotus Expeditor: 6.1, 6.1.1, 6.2, 6.2.1, 6.2.2, 6.2.3

References

http://www.ibm.com/support/docview.wss?uid=swg21575642
https://exchange.xforce.ibmcloud.com/vulnerabilities/72156
http://www.ibm.com/support/docview.wss?uid=swg21575642
https://exchange.xforce.ibmcloud.com/vulnerabilities/72156

Get alerted when CVE-2012-0191 or the next vulnerability affects your stack