| Vulnerability Name: | CCN-8602 | ||||||
| Published: | 2001-09-01 | ||||||
| Updated: | 2001-09-01 | ||||||
| Summary: | Lotus Notes Client could allow a local attacker to gain access to the system using a brute force attack. A local attacker using the hieroglyphic sequence can brute force the Lotus Notes password to gain access to the system. However, in order to exploit this vulnerability, the attacker would have to enter the first 4 password characters correctly. | ||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||
| CVSS v2 Severity: | 4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||
| Vulnerability Consequences: | Gain Access | ||||||
| References: | Source: CCN Type: ENCODE Security Advisory (ESA 0101) Weaknesses in Lotus Notes 5.0 Password Dialog Boxes Source: CCN Type: BID-4324 Lotus Notes Password Hieroglyphics Information Disclosure Vulnerability Source: XF Type: UNKNOWN lotus-notes-hieroglyphic-bruteforce(8602) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||