Vulnerability in Ibm Lotus_domino
CVE-2005-2428
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the…
EPSS: 0.730 (99.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm Lotus_domino — versions 5.0, 6.0, 6.5
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2005-2428?
- CVE-2005-2428 is a vulnerability in Ibm Lotus_domino. Published 2005-08-03.
- Is CVE-2005-2428 known to be exploited?
- 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.