CVE-2007-0068 IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified...
HighCVSS 9.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 7.0 | No fix listed |
| ibm lotus domino | = 7.0.1 | No fix listed |
| ibm lotus domino | = 7.0.2 | No fix listed |
References
- 35765 vdb-entry
- 25520 third-party-advisory vendor-advisory
- www-1.ibm.com
- 24322 vdb-entry
- ADV-2007-2063 vdb-entry
- domino-signature-privilege-escalation(34718) vdb-entry