CVE-2005-2696: Medium severity IBM Lotus Notes vulnerability
IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and "HTTPPassword" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2696?
CVE-2005-2696 has a moderate severity rating due to the potential exposure of sensitive password information.
How do I fix CVE-2005-2696?
To fix CVE-2005-2696, ensure you apply the latest security patches provided by IBM for Lotus Notes.
What data can be exposed due to CVE-2005-2696?
CVE-2005-2696 allows remote attackers to access sensitive password hashes stored in the Notes Address Book.
Which versions of IBM Lotus Notes are affected by CVE-2005-2696?
CVE-2005-2696 affects various versions of IBM Lotus Notes that handle password digests improperly.
Can CVE-2005-2696 be exploited remotely?
Yes, CVE-2005-2696 can be exploited remotely by attackers to obtain sensitive information.