CVE-2007-5700

{"id": "CVE-2007-5700", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-10-29T21:46:00.000", "references": [{"url": "http://osvdb.org/40951", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27321", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21273266", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26176", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3598", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37369", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/40951", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27321", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21273266", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/26176", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/3598", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37369", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information."}, {"lang": "es", "value": "El m\u00e9todo Evaluate LotusScript de IBM Lotus Domino versiones anteriores a 7.0.3 utiliza un contexto de seguridad incorrecto para comandos de f\u00f3rumla @ en algunas circustancias, lo cual podr\u00eda permitir a usuarios remotos autenticados obtener privilegios y conseguir informaci\u00f3n confidencial. \r\n"}], "lastModified": "2024-11-21T00:38:29.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C709D66D-3AE7-48B7-9E27-5D1FE452643C"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0B5F96-0762-45D3-B13E-1E4ED04AD69D"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB1EA406-6488-46C0-B857-0BFFAA65B258"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp3:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D36E3D33-5A60-4846-BED2-8BF3AFC9BBE2"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB5AE863-C29F-4D32-8845-2D2426085071"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.6:*:fp1:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DD8A9BA-5E05-47D8-9C15-60A49A3C3141"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69495B18-39A4-443F-A724-F713C4DD14A2"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A7F62D7-8225-4B84-A3CE-B91616B5AAD9"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82718D37-02FA-4EA0-ABB6-167B5A0A2F0B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}