IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lotus_domino | Ibm | 7.0 (including) | 7.0 (including) |
| Lotus_domino | Ibm | 7.0.1 (including) | 7.0.1 (including) |
| Lotus_domino | Ibm | 7.0.2 (including) | 7.0.2 (including) |