CVE-2002-2014: Medium severity IBM Lotus Domino vulnerability
Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2014?
CVE-2002-2014 is considered a medium severity vulnerability due to its potential for facilitating brute force attacks.
How does CVE-2002-2014 affect user security?
CVE-2002-2014 allows attackers to differentiate between valid and invalid users based on error messages, compromising user account security.
How do I fix CVE-2002-2014?
To address CVE-2002-2014, ensure that error messages do not disclose information about valid user accounts.
Is CVE-2002-2014 present in all versions of Lotus Domino?
CVE-2002-2014 specifically affects Lotus Domino version 5.0.8.
Can CVE-2002-2014 be exploited remotely?
Yes, CVE-2002-2014 can be exploited remotely, allowing attackers to potentially gain insights into valid user credentials.