Vulnerability in IBM Lotus Notes

CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Lotus_notes — versions 7.0, 8.0, 8.5
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)