Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Notes本地不安全默认目录权限漏洞
Vulnerability Description
Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构,运行在Linux/Unix和Microsoft Windows操作系统平台下。 Lotus Notes对文件访问的权限控制上存在漏洞,本地攻击者可能利用此漏洞非授权访问文件。Lotus Notes对notes目录及其所有子对象设置了不安全的默认权限,对Everyone组分配了Full Control权限,这允许本地攻击者能够删除、操控和替换应用程序的任何文件。
CVSS Information
N/A
Vulnerability Type
N/A