Описание
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Ссылки
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:notes:8.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00234
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-426
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
EPSS
Процентиль: 46%
0.00234
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-426