Lucene search

K
nvd[email protected]NVD:CVE-2007-5700
HistoryOct 29, 2007 - 9:46 p.m.

CVE-2007-5700

2007-10-2921:46:00
web.nvd.nist.gov
4

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

65.3%

The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.

Affected configurations

Nvd
Node
ibmlotus_dominoMatch6.5.5
OR
ibmlotus_dominoMatch6.5.5fp1
OR
ibmlotus_dominoMatch6.5.5fp2
OR
ibmlotus_dominoMatch6.5.5fp3
OR
ibmlotus_dominoMatch6.5.6
OR
ibmlotus_dominoMatch6.5.6fp1
OR
ibmlotus_dominoMatch7.0
OR
ibmlotus_dominoMatch7.0.2
OR
ibmlotus_dominoMatch7.0.2fp1
OR
ibmlotus_dominoMatch7.0.2fp2
VendorProductVersionCPE
ibmlotus_domino6.5.5cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:*
ibmlotus_domino6.5.5cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:*
ibmlotus_domino6.5.5cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:*
ibmlotus_domino6.5.5cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp3:*:*:*:*:*
ibmlotus_domino6.5.6cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*
ibmlotus_domino6.5.6cpe:2.3:a:ibm:lotus_domino:6.5.6:*:fp1:*:*:*:*:*
ibmlotus_domino7.0cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*
ibmlotus_domino7.0.2cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*
ibmlotus_domino7.0.2cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:*
ibmlotus_domino7.0.2cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:*

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

65.3%

Related for NVD:CVE-2007-5700