CVE-2000-1215 — IBM Lotus Domino vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.6%
top 18.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedSep 19
Latest updateApr 30

Description

The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/lotus_domino5.0.8

🔴Vulnerability Details

2
GHSA
GHSA-v3rj-h78v-6rg2: The default configuration of Lotus Domino server 5↗2022-04-30
▶
CVEList
CVE-2000-1215: The default configuration of Lotus Domino server 5↗2005-04-21
▶

💥Exploits & PoCs

1
Exploit-DB
Matt Kruse Calendar Script 2.2 - Arbitrary Command Execution↗2000-05-16
▶
CVE-2000-1215 — IBM Lotus Domino vulnerability | cvebase