NVD

Id
57758  
Name
CVE-2007-5701  
Description
Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-29  
Modified Date
2011-03-07  
Seq
2007-5701  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295581 57758 CVE-2007-5701 http://www-1.ibm.com/support/docview.wss?uid=swg21261095  View
295582 57758 CVE-2007-5701 26176  View
295583 57758 CVE-2007-5701 ADV-2007-3598  View
295584 57758 CVE-2007-5701 domino-ca-password-disclosure(37372)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52125 JVNDB-2007-000788 IBM Lotus Domino の認証局 (CA) におけるパスワードが表示される問題 IBM Lotus Domino の認証局 (CA) には管理者ユーザが「ca activate」もしくは「ca unlock」コマンドに大文字を付加して使用していた場合、コンソールログや Admin パネルにパスワードが平文で表示される問題が存在します。 CVE-2007-5701 29056 CVE-2007-5701 57758 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000788.html 2007-10-23 2007-11-26 View