CVE-2007-5700: Medium severity IBM Lotus Domino vulnerability
Published Oct 29, 2007
·Updated
The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.
Affected Software
10 affected components
IBM Lotus Domino=7.0
IBM Lotus Domino=6.5.5
IBM Lotus Domino=6.5.6
IBM Lotus Domino=6.5.6
IBM Lotus Domino=6.5.5
IBM Lotus Domino=7.0.2
IBM Lotus Domino=7.0.2
IBM Lotus Domino=7.0.2
IBM Lotus Domino=6.5.5
IBM Lotus Domino=6.5.5
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 29, 2007
CVE Published
09:46 PM
Oct 30, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5700?
CVE-2007-5700 is classified as a medium severity vulnerability.
2
How do I fix CVE-2007-5700?
To fix CVE-2007-5700, upgrade to IBM Lotus Domino version 7.0.3 or later.
3
Who is affected by CVE-2007-5700?
CVE-2007-5700 affects IBM Lotus Domino versions 6.5.5, 6.5.6, and versions up to 7.0.2.
4
What type of vulnerability is CVE-2007-5700?
CVE-2007-5700 is a privilege escalation vulnerability due to incorrect security context handling.
5
Can unauthenticated users exploit CVE-2007-5700?
No, only remote authenticated users can exploit CVE-2007-5700 to gain additional privileges.