Description
The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.
References
- 40951 vdb-entry
- domino-lotusscript-information-disclosure(37369) vdb-entry
- ADV-2007-3598 vdb-entry
- 26176 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21273266
- 27321 third-party-advisory