CVE-2008-0862

published 2008-02-21

CVE-2008-0862: IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—

CWE-264