AI Score
Confidence
Low
EPSS
Percentile
79.4%
The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.
secunia.com/advisories/22741
securitytracker.com/id?1017203
www-1.ibm.com/support/docview.wss?rs=463&uid=swg21248026
www.fortconsult.net/images/pdf/lotusnotes_keyfiles.pdf
www.securityfocus.com/bid/20960
www.vupen.com/english/advisories/2006/4411
exchange.xforce.ibmcloud.com/vulnerabilities/30118