01642 06 11 11 Arrange Call

Bypassing Reader and Author Access Control in Lotus Domino Servers

CVE-2002-0037 · HIGH

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

Learn more about our Cis Benchmark Audit For Server Software.