Unscored severity · published Aug 3, 2005
CVE-2005-2428
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the…
–
CVSS
73%
EPSS
No
On KEV
Description
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Lotus Domino · Ibm
5.0; 6.0; 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2428
marc.info
http://marc.info/?l=bugtraq&m=112240869130356&w=2
Vendor Advisory
http://secunia.com/advisories/16231/
securitytracker.com
http://securitytracker.com/id?1014584
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21212934
Vendor Advisory
http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf
www.osvdb.org
http://www.osvdb.org/18462
More from Lotus Domino
7.8
CVE-2007-5544
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files…
–
CVE-2014-3086
Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain…
–
CVE-2014-0913
Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an…
–
CVE-2014-0892
IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute…
–
CVE-2014-0822
The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors,…