Bypassing Reader and Author Access Control in Lotus Domino Servers

CVE-2002-0037 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

Learn more about our Cis Benchmark Audit For Server Software.