Vulnerability Details CVE-2000-1215
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=100094373621813&w=2
- http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM
- http://www.kb.cert.org/vuls/id/984555
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10685
- http://marc.info/?l=bugtraq&m=100094373621813&w=2
- http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM
- http://www.kb.cert.org/vuls/id/984555
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10685
Products affected by CVE-2000-1215
-
cpe:2.3:a:ibm:lotus_domino:5.0.8