Access Control Bypass in Lotus Domino Servers by IBM

CVE-2002-0037

Summary

IBM Lotus Domino Servers version 5.x, 4.6x, and 4.5x are prone to a significant vulnerability that allows unauthorized users to bypass established Reader and Author access controls on document objects. This is achievable through a misuse of the Notes API call (NSFDbReadObject), which permits direct access to document objects, potentially exposing sensitive data to unauthorized parties. Organizations using these versions should assess their security measures and consider applying necessary updates to mitigate this exposure.

References