Security Bulletin: IBM Lotus Notes Traveler open redirect (CVE-2012-4824) and cross-site scripting vulnerability (CVE-2012-4825)

Note that the following vulnerabilities are related to a rare, one-time user operation and require that the attacker have explicit knowledge of the time of that operation.


VULNERABILITY DETAILS: IBM Lotus Notes Traveler Open Redirect Vulnerability

CVE ID: CVE-2012-4824

CVSS:
Using the Common Vulnerability Scoring System (CVSS) v2, the security rating for this issue is:

CVSS Base Score: 4.3
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/78815 for the current score.
CVSS Environmental Score: Undefined
CVSS String: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Access Vector: Network Access Complexity: Medium
Authentication: No Confidentiality Impact: None
Integrity Impact: Partial Availability Impact: None


AFFECTED PLATFORMS:

Lotus Notes Traveler release 8.5.3 only (8.5.2 and lower are not affected)

REMEDIATION:

Fix:

This issue is resolved in both 8.5.3.3. Interim Fix 1 and Interim Fix 1 for Notes Traveler 8.5.3 Upgrade Pack 1. You can download these Interim Fixes from Fix Central via the direct links below.


Interim Fix 1 for Notes Traveler 8.5.3.3 (released 15 September 2012)



Platform	Fix Central ID	Download link & filename
Windows	LNT_8533_IF1_WIN	Traveler_8533_IF1_Win.zip
Linux	LNT_8533_IF1_LINUX	Traveler_8533_IF1_Linux.tar



Interim Fix 1 for Notes Traveler 8.5.3 Upgrade Pack 1 (released 14 September 2012)



Platform	Fix Central ID	Download link & filename
Windows	LNT_853_UP1_IF1_WIN	Traveler_853_UP1_IF1_Win.zip
Linux	LNT_853_UP1_IF1_Linux	Traveler_853_UP1_IF1_Linux.tar

Workaround:

None

Mitigation(s):

None

---

VULNERABILITY DETAILS: IBM Lotus Notes Traveler Cross-Site Scripting in ILNT.mobileconfig

CVE ID: CVE-2012-4825

CVSS:
Using the Common Vulnerability Scoring System (CVSS) v2, the security ratings for these issues are:

CVSS Base Score: 4.3
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/78816 for the current score.
CVSS Environmental Score: Undefined
CVSS String: (AV:N/AC:M/Au:N/C:N/I:P/A:N)


Access Vector: Network Access Complexity: Medium
Authentication: No Confidentiality Impact: None
Integrity Impact: Partial Availability Impact: None


AFFECTED PLATFORMS:

Lotus Notes Traveler 8.5.3.1 and earlier.


REMEDIATION:

Fix:

This issue is fixed in Fix Pack 2 for Notes Traveler 8.5.3 (released 29 February 2012) and later releases. You should upgrade to the most current release available on Fix Central via the link below.

http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Lotus&product=ibm/Lotus/Lotus+Notes+Traveler&release=All&platform=All&function=all

Workaround:

None

Mitigation(s):

None

---

References:

• CVE-2012-4824
• CVE-2012-4825
• Complete CVSS Guide
• On-line Calculator V2
• X-Force Vulnerability Database (http://xforce.iss.net/xforce/xfdb/78815)
• X-Force Vulnerability Database (http://xforce.iss.net/xforce/xfdb/78816)

RELATED INFORMATION:

• IBM Secure Engineering Web Portal
• IBM Product Security Incident Response Blog
  

ACKNOWLEDGEMENT:
These vulnerabilities were reported to IBM by researcher Eugene Dokukin (MustLive). For further information, refer to the following Web site: http://websecurity.com.ua/5839/