What is CVE-2013-0522?

CVE-2013-0522 is a high-severity vulnerability in IBM Lotus Notes, classified under Information Disclosure. CVSS score: 7.0/10. Published 2018-07-16.

How severe is CVE-2013-0522?

High severity. CVSS v3 base score is 7.0 out of 10.

Information disclosure in IBM Lotus Notes

CVE-2013-0522

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531.

Vulnerability class: Information Disclosure

EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ibm Lotus_notes — versions 8.0, 8.0.1, 8.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2013-0522?: CVE-2013-0522 is a high-severity vulnerability in IBM Lotus Notes, classified under Information Disclosure. CVSS score: 7.0/10. Published 2018-07-16.
How severe is CVE-2013-0522?: High severity. CVSS v3 base score is 7.0 out of 10.