CVE-2007-5701

no score yetEPSS 0.2%

ibm lotus domino: no CVSS score yet. EPSS 0.2% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-310
Published: 2007-10-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_domino

References

http://osvdb.org/40952
http://secunia.com/advisories/27321
http://www-1.ibm.com/support/docview.wss?uid=swg21261095
http://www.securityfocus.com/bid/26176
http://www.vupen.com/english/advisories/2007/3598

Check your stack JSON