CVE-2007-5701
- State
- Published
- Severity
- Not scored
- Published
- Oct 29, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 29, 2007
Description
Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www-1.ibm.com/support/docview.wss?uid=swg21261095
- domino-ca-password-disclosure(37372)vdb-entry
- ADV-2007-3598vdb-entry
- 40952vdb-entry
- 26176vdb-entry
- 27321third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.