10

CVE-2011-1519

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field.  NOTE: this might overlap CVE-2011-0920.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Lotus Domino Version7.0
Ibm ≫ Lotus Domino Version7.0.1
Ibm ≫ Lotus Domino Version7.0.1.1
Ibm ≫ Lotus Domino Version7.0.2
Ibm ≫ Lotus Domino Version7.0.2.1
Ibm ≫ Lotus Domino Version7.0.2.2
Ibm ≫ Lotus Domino Version7.0.2.3
Ibm ≫ Lotus Domino Version7.0.3
Ibm ≫ Lotus Domino Version7.0.3.1
Ibm ≫ Lotus Domino Version7.0.4
Ibm ≫ Lotus Domino Version7.0.4.1
Ibm ≫ Lotus Domino Version7.0.4.2
Ibm ≫ Lotus Domino Version8.0
Ibm ≫ Lotus Domino Version8.0.1
Ibm ≫ Lotus Domino Version8.0.2
Ibm ≫ Lotus Domino Version8.0.2.1
Ibm ≫ Lotus Domino Version8.0.2.2
Ibm ≫ Lotus Domino Version8.0.2.3
Ibm ≫ Lotus Domino Version8.0.2.4
Ibm ≫ Lotus Domino Version8.0.2.5
Ibm ≫ Lotus Domino Version8.0.2.6
Ibm ≫ Lotus Domino Version8.5.0
Ibm ≫ Lotus Domino Version8.5.0.1
Ibm ≫ Lotus Domino Version8.5.1
Ibm ≫ Lotus Domino Version8.5.1.1
Ibm ≫ Lotus Domino Version8.5.1.2
Ibm ≫ Lotus Domino Version8.5.1.3
Ibm ≫ Lotus Domino Version8.5.1.4
Ibm ≫ Lotus Domino Version8.5.1.5
Ibm ≫ Lotus Domino Version8.5.2
Ibm ≫ Lotus Domino Version8.5.2.1
Ibm ≫ Lotus Domino Version8.5.2.2
Ibm ≫ Lotus Domino Version8.5.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 10.37% 0.929
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.