CVE-2007-5700
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/10/2007
Last modified:
09/04/2025
Description
The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.
Impact
Base Score 2.0
6.30
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp3:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:6.5.6:*:fp1:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:* | ||
| cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://osvdb.org/40951
- http://secunia.com/advisories/27321
- http://www-1.ibm.com/support/docview.wss?uid=swg21273266
- http://www.securityfocus.com/bid/26176
- http://www.vupen.com/english/advisories/2007/3598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37369
- http://osvdb.org/40951
- http://secunia.com/advisories/27321
- http://www-1.ibm.com/support/docview.wss?uid=swg21273266
- http://www.securityfocus.com/bid/26176
- http://www.vupen.com/english/advisories/2007/3598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37369