CVE-2012-0187 Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privileges via a Trojan horse DLL in the current working directory.
HighCVSS 9.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus expeditor | = 6.1 | No fix listed |
| ibm lotus expeditor | = 6.1.1 | No fix listed |
| ibm lotus expeditor | = 6.2 | No fix listed |
| ibm lotus expeditor | = 6.2.1 | No fix listed |
| ibm lotus expeditor | = 6.2.2 | No fix listed |
| ibm lotus expeditor | = 6.2.3 | No fix listed |