Lotus Domino web server prior to v5.0.9 allows password protected features to be accessed without the password by sending a malformed URL.
Lotus Domino web server prior to v5.0.9 allows password protected features to be accessed without the password by sending a malformed URL.