CVE-2013-0534

2013-06-2114:55:01

CWE-255

[email protected]

web.nvd.nist.gov

ibm sametime

connect client

security vulnerability

cleartext passwords

process memory

information security

6 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.

Affected configurations

NVD

Node

ibmlotus_sametimeMatch8.5.1

ibmlotus_sametimeMatch8.5.1.1

ibmlotus_sametimeMatch8.5.1.2

ibmlotus_sametimeMatch8.5.2

ibmlotus_sametimeMatch8.5.2.1

ibmsametimeMatch8.5.1

ibmsametimeMatch8.5.1.1

ibmsametimeMatch8.5.1.2

ibmsametimeMatch8.5.2

ibmsametimeMatch8.5.2.1

CPENameOperatorVersion
ibm:lotus_sametimeibm lotus sametimeeq8.5.1
ibm:lotus_sametimeibm lotus sametimeeq8.5.1.1
ibm:lotus_sametimeibm lotus sametimeeq8.5.1.2
ibm:lotus_sametimeibm lotus sametimeeq8.5.2
ibm:lotus_sametimeibm lotus sametimeeq8.5.2.1
ibm:sametimeibm sametimeeq8.5.1
ibm:sametimeibm sametimeeq8.5.1.1
ibm:sametimeibm sametimeeq8.5.1.2
ibm:sametimeibm sametimeeq8.5.2
ibm:sametimeibm sametimeeq8.5.2.1

CPE	Name	Operator	Version
ibm:lotus_sametime	ibm lotus sametime	eq	8.5.1
ibm:lotus_sametime	ibm lotus sametime	eq	8.5.1.1
ibm:lotus_sametime	ibm lotus sametime	eq	8.5.1.2
ibm:lotus_sametime	ibm lotus sametime	eq	8.5.2
ibm:lotus_sametime	ibm lotus sametime	eq	8.5.2.1
ibm:sametime	ibm sametime	eq	8.5.1
ibm:sametime	ibm sametime	eq	8.5.1.1
ibm:sametime	ibm sametime	eq	8.5.1.2
ibm:sametime	ibm sametime	eq	8.5.2
ibm:sametime	ibm sametime	eq	8.5.2.1