Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:38
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html - | |
References | () http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html - | |
References | () http://www.iss.net/security_center/static/10095.php - | |
References | () http://www.kb.cert.org/vuls/id/657899 - US Government Resource |
Information
Published : 2002-04-22 04:00
Updated : 2024-11-20 23:38
NVD link : CVE-2002-0037
Mitre link : CVE-2002-0037
CVE.ORG link : CVE-2002-0037
JSON object : View
Products Affected
ibm
- lotus_domino_server
CWE