The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Load, (2) Tell, or (3) Set Configuration command.
References
Configurations
History
No history.
Information
Published : 2011-03-25 19:55
Updated : 2024-02-28 11:41
NVD link : CVE-2011-1520
Mitre link : CVE-2011-1520
CVE.ORG link : CVE-2011-1520
JSON object : View
Products Affected
ibm
- lotus_domino
CWE
CWE-287
Improper Authentication