Description
Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID.
References
- 3488 vdb-entry
- 20011031 Lotus Domino Default Navigator Protection By-pass (#NISR29102001B) mailing-list
- lotus-domino-navigator-access(7423) vdb-entry