Lucene search

K
cveMitreCVE-2007-0068
HistoryJun 06, 2007 - 9:30 p.m.

CVE-2007-0068

2007-06-0621:30:00
mitre
web.nvd.nist.gov
22
ibm
lotus domino
cve-2007-0068
vulnerability
security
authentication
privileges
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.016

Percentile

87.4%

IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.

Affected configurations

Nvd
Node
ibmlotus_dominoMatch7.0
OR
ibmlotus_dominoMatch7.0.1
OR
ibmlotus_dominoMatch7.0.2
VendorProductVersionCPE
ibmlotus_domino7.0cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*
ibmlotus_domino7.0.1cpe:2.3:a:ibm:lotus_domino:7.0.1:*:*:*:*:*:*:*
ibmlotus_domino7.0.2cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.016

Percentile

87.4%

Related for CVE-2007-0068