CVE-2011-1519: IBM Lotus Domino

High severity, CVSS 10.0. EPSS: 9.2% chance of exploitation in the next 30 days.

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.

Affected products

• IBM Lotus Domino: version 7.0 only; version 7.0.1 only; version 7.0.1.1 only; version 7.0.2 only; version 7.0.2.1 only; version 7.0.2.2 only; …

Published 2011-03-25. Last modified 2026-06-16.