description: IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
problem types: Gain Privileges
affected:
{
product: Notes
vendor: IBM
versions:
status: affected, version: 8.5.3.6
status: affected, version: 8.5
status: affected, version: 8.5.1
status: affected, version: 8.5.1.5
status: affected, version: 8.5.2
status: affected, version: 8.5.2.4
status: affected, version: 8.5.3
status: affected, version: 9.0.1
status: affected, version: 9.0
status: affected, version: 8.5.0.2
status: affected, version: 9.0.1.9
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:R
version: 3.0
]