Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Domino远程控制台验证绕过漏洞
Vulnerability Description
IBM Lotus Domino（又名IBM Domino）是美国IBM公司的一套用于托管社交商务应用的平台。该平台提供一个管理客户端和Web浏览器界面，并具有易于管理、总拥有成本低、高度安全等特点。 Lotus Domino在实现上存在远程控制台验证绕过漏洞。在处理用户验证时，没有合理的过滤COOKIEFILE路径，导致远程攻击者可利用特制的COOKIEFILE的UNC路径，以系统级别的权限执行任意代码，完全控制受影响系统，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A