Lotus Mobile Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:lotus_mobile_connect:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Lotus Mobile Connect (66a82ac6-405c-5887-a129-7698f867922b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-4595 |
vulnerable | 2026-06-08 04:56:29.585037 |
Details available
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-09-17T01:50:31.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4594 |
vulnerable | 2026-06-08 04:56:29.584596 |
Details available
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-09-17T00:00:32.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4593 |
vulnerable | 2026-06-08 04:56:29.584257 |
Details available
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-08-07T03:51:17.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4592 |
vulnerable | 2026-06-08 04:56:29.583880 |
Details available
The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) by making many TCP connection attempts.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-08-07T03:51:17.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4591 |
vulnerable | 2026-06-08 04:56:29.583380 |
Details available
The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-08-07T03:51:17.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4590 |
vulnerable | 2026-06-08 04:56:29.578418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.