CVE-2005-2454: Medium severity IBM Lotus Notes vulnerability
IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2454?
CVE-2005-2454 has a moderate severity rating due to the use of insecure default permissions in the Notes folder.
How do I fix CVE-2005-2454?
To fix CVE-2005-2454, adjust the permissions of the "Notes" folder to restrict access from unauthorized local users.
What versions of IBM Lotus Notes are affected by CVE-2005-2454?
CVE-2005-2454 affects IBM Lotus Notes versions 6.5.4, 6.5.5, 7.0.0, and 7.0.1.
Can CVE-2005-2454 lead to privilege escalation?
Yes, CVE-2005-2454 can lead to privilege escalation as local users can gain full control over the Notes folder.
Are there any known workarounds for CVE-2005-2454?
There are no official workarounds for CVE-2005-2454; the recommended solution is to change folder permissions.