Lotus Domino Server is an application framework for web based collaborative software. It runs on multiple platforms including Windows and Unix. An issue has been reported in Lotus Domino server, which could allow for remote users to determine the validity of a username existing on a host. When a remote user submits a GET request for a possible user's account, the server response will assist the user in determining the validity of the username submitted. Reportedly, the server will return a HTTP 200 OK message when given a valid user name. If the username is not valid a 404 File not Found error message will be returned.
Lotus Domino Server is an application framework for web based collaborative software. It runs on multiple platforms including Windows and Unix. An issue has been reported in Lotus Domino server, which could allow for remote users to determine the validity of a username existing on a host. When a remote user submits a GET request for a possible user's account, the server response will assist the user in determining the validity of the username submitted. Reportedly, the server will return a HTTP 200 OK message when given a valid user name. If the username is not valid a 404 File not Found error message will be returned.