Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2008-4506: IBM Lotus Quickr 8.1 lets manager delete superuser group

CVE-2008-4506 · published 18 years ago

Summary

Versions of IBM Lotus Quickr 8.1 prior to Fix Pack 1 let a place manager remove or demote the superuser group that controls a location. This could let someone lower the rights of users who should have full control, potentially affecting security and workflow. Apply the available fix pack (8.1.0.1) or upgrade to a newer version, and verify that only trusted administrators have place manager rights.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ibm	lotus_quickr	8.1 `cpe:2.3:a:ibm:lotus_quickr:8.1:::::::*`

Original advisory text

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to "demote or delete a place superuser group" via unknown vectors.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

1% chance of attack within 30 days

Type

CWE-264Permissions, Privileges, and Access Controls

Timeline

Published9 Oct 2008

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2008-4506 · NVD

Track software like this

Free during beta