PT-2016-4136 · Ibm · Ibm Domino

Publicado 2016-06-29 · Atualizado 2019-10-16 · CVE-2016-0304

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.3 FP6 IF12 and versions 9.x through 9.0.1 FP5

Description The Java Console in IBM Domino, when used with a certain unsupported configuration involving UNC share pathnames, allows remote attackers to bypass authentication and possibly execute arbitrary code. This issue exists due to an incomplete fix for a previous security flaw.

Recommendations For IBM Domino versions 8.5.x through 8.5.3 FP6 IF12, update to version 8.5.3 FP6 IF13 or later. For IBM Domino versions 9.x through 9.0.1 FP5, update to version 9.0.1 FP6 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-0304

Produtos afetados

Ibm Domino

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-0304 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21983328 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0304 · Nota de Segurança