PT-2007-6688 · Ibm · Ibm Lotus Domino

Publicado 2007-10-29 · Atualizado 2017-07-29 · CVE-2007-5701

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 7.0.3

Description The issue allows local users or attackers with physical access to obtain sensitive information, such as passwords, when an administrator enters a command with any uppercase character. This results in cleartext password disclosure in the console log and Admin panel due to an incomplete blacklist vulnerability in the Certificate Authority (CA).

Recommendations For versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of uppercase characters when entering "ca activate" or "ca unlock" commands to minimize the risk of password disclosure. Restrict physical access to the system and limit local user privileges to reduce the potential for exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-310

Identificadores relacionados

CVE-2007-5701

Produtos afetados

Ibm Lotus Domino

Referências · 8

• http://securityfocus.com/bid/26176 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37372 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5701 · Nota
• http://vupen.com/english/advisories/2007/3598 · Nota
• http://osvdb.org/40952 · Nota
• http://secunia.com/advisories/27321 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21261095 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5701 · Nota de Segurança