Design/Logic Flaw

2010-12-1620:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.0%

JSON

IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users from a different Domino domain than the Traveler server, which allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain.

CPENameOperatorVersion
lotus_notes_travelereq8.5.0.0
lotus_notes_travelereq8.5.0.2
lotus_notes_travelerle8.5.1.2
lotus_notes_travelereq8.0.1.3
lotus_notes_travelereq8.0.1
lotus_notes_travelereq8.0.1.2
lotus_notes_travelereq8.0
lotus_notes_travelereq8.5.0.1
lotus_notes_travelereq8.5.1.1

Name	Operator	Version
lotus_notes_traveler	eq	8.5.0.0
lotus_notes_traveler	eq	8.5.0.2
lotus_notes_traveler	le	8.5.1.2
lotus_notes_traveler	eq	8.0.1.3
lotus_notes_traveler	eq	8.0.1
lotus_notes_traveler	eq	8.0.1.2
lotus_notes_traveler	eq	8.0
lotus_notes_traveler	eq	8.5.0.1
lotus_notes_traveler	eq	8.5.1.1