CVE-2012-5308

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.3.3 Interim Fix 2

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a "getReportProblem" upload action.

Recommendations For versions prior to 8.5.3.3 Interim Fix 2, update to 8.5.3.3 Interim Fix 2 or later to resolve the issue. As a temporary workaround, consider restricting access to the servlet/traveler component to minimize the risk of exploitation.