{"api_version":"1","generated_at":"2026-07-23T11:30:01+00:00","cve":"CVE-2007-5701","urls":{"html":"https://cve.report/CVE-2007-5701","api":"https://cve.report/api/cve/CVE-2007-5701.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5701","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5701"},"summary":{"title":"CVE-2007-5701","description":"Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a \"ca activate\" or \"ca unlock\" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-10-29 21:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-200","CWE-310","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/40952","name":"http://osvdb.org/40952","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/26176","name":"http://www.securityfocus.com/bid/26176","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"IBM Lotus Domino Information Disclosure Vulnerabilities and Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/27321","name":"http://secunia.com/advisories/27321","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"IBM Lotus Domino Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37372","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37372","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3598","name":"http://www.vupen.com/english/advisories/2007/3598","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095","name":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"410"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5701","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5701","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.5","cpe7":"*","cpe8":"fp1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.5","cpe7":"*","cpe8":"fp2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.5","cpe7":"*","cpe8":"fp3","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"6.5.6","cpe7":"*","cpe8":"fp1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"7.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"7.0.2","cpe7":"*","cpe8":"fp1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5701","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino","cpe6":"7.0.2","cpe7":"*","cpe8":"fp2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:39:13.582Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095"},{"name":"domino-ca-password-disclosure(37372)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37372"},{"name":"ADV-2007-3598","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3598"},{"name":"40952","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/40952"},{"name":"26176","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26176"},{"name":"27321","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27321"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-10-23T00:00:00.000Z","descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a \"ca activate\" or \"ca unlock\" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095"},{"name":"domino-ca-password-disclosure(37372)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37372"},{"name":"ADV-2007-3598","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3598"},{"name":"40952","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/40952"},{"name":"26176","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26176"},{"name":"27321","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27321"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5701","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a \"ca activate\" or \"ca unlock\" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095","refsource":"CONFIRM","url":"http://www-1.ibm.com/support/docview.wss?uid=swg21261095"},{"name":"domino-ca-password-disclosure(37372)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37372"},{"name":"ADV-2007-3598","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3598"},{"name":"40952","refsource":"OSVDB","url":"http://osvdb.org/40952"},{"name":"26176","refsource":"BID","url":"http://www.securityfocus.com/bid/26176"},{"name":"27321","refsource":"SECUNIA","url":"http://secunia.com/advisories/27321"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5701","datePublished":"2007-10-29T21:00:00.000Z","dateReserved":"2007-10-29T00:00:00.000Z","dateUpdated":"2024-08-07T15:39:13.582Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-10-29 21:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-200","CWE-310","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C709D66D-3AE7-48B7-9E27-5D1FE452643C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:*","matchCriteriaId":"7B0B5F96-0762-45D3-B13E-1E4ED04AD69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:*","matchCriteriaId":"DB1EA406-6488-46C0-B857-0BFFAA65B258"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp3:*:*:*:*:*","matchCriteriaId":"D36E3D33-5A60-4846-BED2-8BF3AFC9BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5AE863-C29F-4D32-8845-2D2426085071"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.6:*:fp1:*:*:*:*:*","matchCriteriaId":"1DD8A9BA-5E05-47D8-9C15-60A49A3C3141"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"69495B18-39A4-443F-A724-F713C4DD14A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:*","matchCriteriaId":"4A7F62D7-8225-4B84-A3CE-B91616B5AAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:*","matchCriteriaId":"82718D37-02FA-4EA0-ABB6-167B5A0A2F0B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5701","Ordinal":"1","Title":"CVE-2007-5701","CVE":"CVE-2007-5701","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5701","Ordinal":"1","NoteData":"Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a \"ca activate\" or \"ca unlock\" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel.","Type":"Description","Title":"CVE-2007-5701"},{"CveYear":"2007","CveId":"5701","Ordinal":"2","NoteData":"2007-10-29","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5701","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}