Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Expeditor URI处理器命令执行漏洞
Vulnerability Description
Lotus Expeditor之前名为IBM WebSphere Everyplace Deployment，是用于创建、部署和维护各种应用的管理客户端。 Lotus expeditor中的rcplauncher(由lotus symphony套件安装)进程注册了一个cai: uri处理器。由于rcplauncher进程会接受各种参数，因此可能被滥用执行任意代码。例如，-launcher选项参数会执行可执行程序。
CVSS Information
N/A
Vulnerability Type
N/A