Medium severity · published Feb 8, 2017
CVE-2016-0270
IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote…
5.9
CVSS
3.1%
EPSS
No
On KEV
Description
IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack." NOTE: this CVE has been incorrectly used for GCM nonce reuse issues in other products; see CVE-2016-10213 for the A10 issue, CVE-2016-10212 for the Radware issue, and CVE-2017-5933 for the Citrix issue.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Client Application Access · Ibm
1.0.0.1 · source: NVD
DO
Domino · Ibm
9.0.1.3; 9.0.1.4; 9.0.1.5 · source: NVD
NO
Notes · Ibm
9.0.1.3; 9.0.1.4; 9.0.1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0270
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0270
Mitigation
http://www-01.ibm.com/support/docview.wss?uid=swg21979604
Mitigation
http://www-01.ibm.com/support/docview.wss?uid=swg21979669
Mitigation
http://www-01.ibm.com/support/docview.wss?uid=swg21979673
Third Party Advisory
http://www.securityfocus.com/bid/96062
www.securitytracker.com
http://www.securitytracker.com/id/1037795
Third Party Advisory
https://github.com/nonce-disrespect/nonce-disrespect
More from Client Application Access
7.8
CVE-2018-1411
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVE-2018-1410
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVE-2018-1409
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVE-2017-1714
IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege
7.8
CVE-2017-1711
IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory