Security Advisory
CVE-2010-2279
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.