Patchwire CVEs, their patch status, and feeds to follow them

CVE-2002-2014

No fix known EPSS 2%

Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.

Published 2005-07-14 · CVE record · OSV

Products: ibm lotus_domino