NVD

Id
16764  
Name
CVE-2016-0304  
Description
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-06-28  
Modified Date
2016-06-29  
Seq
2016-0304  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
93283 16764 CVE-2016-0304 http://www-01.ibm.com/support/docview.wss?uid=swg21983328  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2589 JVNDB-2016-003362 IBM Domino の Java コンソールにおける認証を回避される脆弱性 IBM Domino の Java コンソールには、UNC 共有パス名を含む特定のサポートされていない設定が使用される場合、認証を回避され、任意のコードを実行される脆弱性が存在します。 CVE-2016-0304 86508 CVE-2016-0304 16764 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003362.html 2016-05-26 2016-06-30 View