CVE-2016-0304
Severity CVSS v4.0:
Pending analysis
Type:
CWE-284
Improper Access Control
Publication date:
29/06/2016
Last modified:
12/04/2025
Description
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920.
Impact
Base Score 3.x
8.10
Severity 3.x
HIGH
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.3.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.2.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.2.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.2.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.2.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:ibm:domino:8.5.1.2:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page