CVE-2010-4547

2022-10-0316:21:03

mitre

www.cve.org

ibm lotus notes traveler

multidomain environment

policy documents

mobile users

domino domain

traveler server

remote authenticated users

access restrictions

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.0%

JSON

IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users from a different Domino domain than the Traveler server, which allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain.