CVE-2007-5701: Infoleak
Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5701?
CVE-2007-5701 is considered a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2007-5701?
To fix CVE-2007-5701, you should upgrade to IBM Lotus Domino version 7.0.3 or later.
Who is affected by CVE-2007-5701?
CVE-2007-5701 affects local users and attackers with physical access to systems running certain versions of IBM Lotus Domino.
What types of information can be exposed due to CVE-2007-5701?
CVE-2007-5701 can expose sensitive information such as passwords when specific administrative commands are entered.
Which versions of IBM Lotus Domino are vulnerable to CVE-2007-5701?
Versions 6.5.5, 6.5.6, and 7.0 up to 7.0.2 of IBM Lotus Domino are vulnerable to CVE-2007-5701.