| Package | Affected versions | Patched versions |
|---|---|---|
| domino | = 8.5.0= 8.5.1= 8.5.1.1= 8.5.1.2= 8.5.1.3= 8.5.1.4= 8.5.1.5= 8.5.2= 8.5.2.1= 8.5.2.2= 8.5.2.3= 8.5.2.4= 8.5.3= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 8.5.3.6= 9.0.1= 9.0.1.1= 9.0.1.2= 9.0.1.3= 9.0.1.4= 9.0.1.5 |
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free