CVE-2007-0977

published 2007-02-16

CVE-2007-0977: IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through…

high 7.1 CVSS 3.1

AV N AC M Au N C C I N A N

EXPLOIT

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—