Test ID:	1.3.6.1.4.1.25623.1.0.809885
Category:	Web application abuses
Title:	IBM Domino Authentication Bypass Vulnerability
Summary:	IBM Domino is prone to an authentication bypass vulnerability.
Description:	Summary: IBM Domino is prone to an authentication bypass vulnerability. Vulnerability Insight: The flaw is due to error as for very large data sets, IBM Domino Web servers using 'TLS' and 'AES GCM' generate a weak nonce. Vulnerability Impact: Successful exploitation will allow attacker to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a 'forbidden attack'. Affected Software/OS: IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1. Solution: Upgrade to IBM Domino 9.0.1 FP5 Interim Fix 2. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0270 BugTraq ID: 96062 http://www.securityfocus.com/bid/96062 https://github.com/nonce-disrespect/nonce-disrespect http://www.securitytracker.com/id/1037795
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.