CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2010-04-20

Last modified

2024-08-07

Weaknesses

CWE-255

Affected products

• Lotus Notes (Ibm)

References

• http://secunia.com/advisories/39507
• http://www-01.ibm.com/support/docview.wss?uid=swg21427073
• http://www.securityfocus.com/bid/39525
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14725