CVE-2018-1411: High severity ibm lotus notes client vulnerability
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138710.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-1411.
What is the severity level of CVE-2018-1411?
The severity level of CVE-2018-1411 is high with a value of 7.8.
Which software versions are affected by CVE-2018-1411?
CVE-2018-1411 affects IBM Notes versions 8.5.1.5, 8.5.2.4, 8.5.3.6, 9.0, 9.0.1.9, and IBM Client Application Access versions 1.0.0.1, 1.0.1, 1.0.1.2.
How can a local user exploit this vulnerability?
A local user can exploit this vulnerability by crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker.
Where can I find more information about CVE-2018-1411?
You can find more information about CVE-2018-1411 on the following links: 1. [IBM Support: CVE-2018-1411](http://www.ibm.com/support/docview.wss?uid=swg22010766) 2. [IBM Support: CVE-2018-1411](http://www.ibm.com/support/docview.wss?uid=swg22010767) 3. [IBM X-Force ID: 138710](https://exchange.xforce.ibmcloud.com/vulnerabilities/138710)