Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Domino代理签名验证权限提升漏洞
Vulnerability Description
Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构,运行在Linux/Unix和Microsoft Windows操作系统平台下。 Lotus Domino的代理签名验证中存在漏洞,本地攻击者可能利用此漏洞提升自己在应用中的权限。 如果远程攻击者拥有对Domino服务器上数据库的designer或manager访问权限,且使用模板替换了数据库的设计,而该模板中的调度代理被设置为enabled且由可信任的有效ID签名,则使用修改过后的代理允许重新使用某些标记,导致使用之前已经验
CVSS Information
N/A
Vulnerability Type
N/A