ID de Prueba:	1.3.6.1.4.1.25623.1.0.809885
Categoría:	Web application abuses
Título:	IBM Domino Authentication Bypass Vulnerability
Resumen:	IBM Domino is prone to an authentication bypass vulnerability.
Descripción:	Summary: IBM Domino is prone to an authentication bypass vulnerability. Vulnerability Insight: The flaw is due to error as for very large data sets, IBM Domino Web servers using 'TLS' and 'AES GCM' generate a weak nonce. Vulnerability Impact: Successful exploitation will allow attacker to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a 'forbidden attack'. Affected Software/OS: IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1. Solution: Upgrade to IBM Domino 9.0.1 FP5 Interim Fix 2. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	BugTraq ID: 96062 Common Vulnerability Exposure (CVE) ID: CVE-2016-0270 http://www.securityfocus.com/bid/96062 https://github.com/nonce-disrespect/nonce-disrespect http://www.securitytracker.com/id/1037795
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.