IBM Lotus Domino Cookie File Authentication Bypass and Code Execution Vulnerability

A vulnerability has been identified in IBM Lotus Domino, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a design error in the remote console functionality that relies on a user-supplied COOKIEFILE path to retrieve stored credentials and then compares them to the user-provided username and cookie, which could be exploited by remote attackers to bypass authentication and execute arbitrary code with SYSTEM privileges.

It is not aware of any vendor-supplied patch.