CVE-2005-2428: ibm lotus_domino
Vulnerability summary
CVE-2005-2428 is a medium (CVSS 5.0) vulnerability in ibm lotus_domino. EPSS estimates a 73.03% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 03-08-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
73.03%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 73.03% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundLotus Domino R6 Webmail - Remote Password Hash Dumper
Maturity: weaponized
IBM Lotus Domino R8 - Password Hash Extraction
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ibm1 product
- lotus_domino5.0 | 6.0 | 6.5
1 vendor · 1 product
References
10 links- www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdfX Refsource MISCVendor Advisory
- www.securiteam.com/securitynews/5FP0E15GLQ.htmlX Refsource MISC