CVEvulnerability
CVE-2013-0522
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531.
Affected configurations
• ibm lotus notes 8.0
• ibm lotus notes 8.0.1
• ibm lotus notes 8.0.2
• ibm lotus notes 8.5
• ibm lotus notes 8.5.1
• ibm lotus notes 8.5.2
• ibm lotus notes 8.5.3
• ibm lotus notes 9.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82531 VDB Entry, Vendor Advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21634508 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82531 VDB Entry, Vendor Advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21634508 Vendor Advisory