IBM Lotus Domino up to 6.5.2 FormReflectingURLValue cross site scripting
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.7 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, was found in IBM Lotus Domino up to 6.5.2 (Groupware Software). Affected is some unknown processing. The manipulation of the argument FormReflectingURLValue
with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature.
The bug was discovered 10/18/2004. The weakness was published 10/18/2004 by Juan C. Calderon as not defined posting (Bugtraq). The advisory is available at securityfocus.com. This vulnerability is traded as CVE-2004-1621 since 02/20/2005. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details and a public exploit are known. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.
After immediately, there has been an exploit disclosed. The exploit is shared for download at secunia.com. It is declared as proof-of-concept. The real existence of this vulnerability is still doubted at the moment. The vulnerability scanner Nessus provides a plugin with the ID 15514 (IBM Lotus Notes/Domino Square Brackets Encoding Failure XSS), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses : XSS and running in the context r.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at lotus.com. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (17758) and Tenable (15514). Further details are available at securityfocus.com.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.0VulDB Meta Temp Score: 4.7
VulDB Base Score: 5.0
VulDB Temp Score: 4.7
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Cross site scriptingCWE: CWE-80 / CWE-74 / CWE-707
ATT&CK: T1059.007
Local: No
Remote: Yes
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 15514
Nessus Name: IBM Lotus Notes/Domino Square Brackets Encoding Failure XSS
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: DisableStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Exploit Delay Time: 🔍
Patch: lotus.com
Timeline
10/18/2004 🔍10/18/2004 🔍
10/18/2004 🔍
10/18/2004 🔍
10/18/2004 🔍
10/18/2004 🔍
10/19/2004 🔍
10/19/2004 🔍
10/20/2004 🔍
10/20/2004 🔍
10/21/2004 🔍
02/20/2005 🔍
06/29/2019 🔍
Sources
Vendor: ibm.comAdvisory: securityfocus.com⛔
Researcher: Juan C. Calderon
Status: Not defined
Disputed: 🔍
CVE: CVE-2004-1621 (🔍)
X-Force: 17758 - IBM Lotus Notes/Domino cross-site scripting, Medium Risk
SecurityTracker: 1011779
SecurityFocus: 11458 - IBM Lotus Domino Cross-Site Scripting and HTML Injection Vulnerabilities
Secunia: 12891 - IBM Lotus Domino Server Potential Cross-Site Scripting Security Issue, Not Critical
OSVDB: 10966 - IBM Lotus Notes/Domino Square Brackets Encoding Failure XSS
scip Labs: https://www.scip.ch/en/?labs.20161013
Misc.: 🔍
Entry
Created: 10/21/2004 17:01Updated: 06/29/2019 17:36
Changes: 10/21/2004 17:01 (92), 06/29/2019 17:36 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.