NVD

Id
8450  
Name
CVE-2011-1520  
Description
The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Load, (2) Tell, or (3) Set Configuration command.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-25  
Modified Date
2011-09-21  
Seq
2011-1520  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48432 8450 CVE-2011-1520 http://publib.boulder.ibm.com/infocenter/domhelp/v8r0/index.jsp?topic=/com.ibm.help.domino.admin.doc/DOC/H_THE_DOMINO_CONTROLLER_AND_CONSOLE_OVER.html  View
48433 8450 CVE-2011-1520 8164  View
48434 8450 CVE-2011-1520 http://www.lotus.com/ldd/doc/domino_notes/rnext/help6_admin.nsf/2e73cbb2141acefa85256b8700688cea/0c50e423038555d085256c1d003a31f0?OpenDocument  View
48435 8450 CVE-2011-1520 http://www.lotus.com/ldd/dominowiki.nsf/dx/server_console_password  View
48436 8450 CVE-2011-1520 20110322 ZDI-11-110: (0day) IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability  View
48437 8450 CVE-2011-1520 http://www.zerodayinitiative.com/advisories/ZDI-11-110  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31360 JVNDB-2011-001600 IBM Lotus Domino のサーバコンソールにおける重要な情報を取得される脆弱性 IBM Lotus Domino のデフォルト設定されているサーバコンソールは、パスワードの入力を要求しないため、管理上の変更、または重要な情報を取得される脆弱性が存在します。 CVE-2011-1520 49427 CVE-2011-1520 8450 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001600.html 2011-03-25 2011-05-19 View