Lucene search
MitreCVE-2002-1010HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1010
2002-10-0404:00:00
mitre
web.nvd.nist.gov
18
lotus domino
r4
access restrictions
bypass
http request
wildcard character
web handlers
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.004
Percentile
73.8%
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a “?” character, which is treated as a wildcard character and bypasses the web handlers.
Affected configurations
Node
lotusdomino_r4Range≤4.0
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.004
Percentile
73.8%
Related for CVE-2002-1010