Vulnerability in Ibm Lotus Domino

CVE-2002-2014

Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.

EPSS: 0.023 (81.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Lotus_domino — versions 5.0.8
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, Exploit, x_refsource_VULN-DEV)
cve@mitre.org (vdb-entry, x_refsource_XF)