CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive…

published August 25, 2005

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and "HTTPPassword" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02235 · 82.7th percentile
Published
2005-08-25T04:00Z
EPSS history
Timeline
  • 25 AUG 04:00Z
    IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive…
    cvelistv5