Lucene search
IbmCVE-2013-0534HistoryJun 21, 2013 - 2:55 p.m.
CVE-2013-0534
2013-06-2114:55:01
CWE-255
ibm
web.nvd.nist.gov
30
ibm sametime
connect client
security vulnerability
cleartext passwords
process memory
information security
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0
Percentile
5.1%
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.
Affected configurations
Node
ibmlotus_sametimeMatch8.5.1
ORibmlotus_sametimeMatch8.5.1.1
ORibmlotus_sametimeMatch8.5.1.2
ORibmlotus_sametimeMatch8.5.2
ORibmlotus_sametimeMatch8.5.2.1
ORibmsametimeMatch8.5.1
ORibmsametimeMatch8.5.1.1
ORibmsametimeMatch8.5.1.2
ORibmsametimeMatch8.5.2
ORibmsametimeMatch8.5.2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_sametime | 8.5.1 | cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.5.1.1 | cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.5.1.2 | cpe:2.3:a:ibm:lotus_sametime:8.5.1.2:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.5.2 | cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.5.2.1 | cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:* |
| ibm | sametime | 8.5.1 | cpe:2.3:a:ibm:sametime:8.5.1:*:*:*:*:*:*:* |
| ibm | sametime | 8.5.1.1 | cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:* |
| ibm | sametime | 8.5.1.2 | cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:* |
| ibm | sametime | 8.5.2 | cpe:2.3:a:ibm:sametime:8.5.2:*:*:*:*:*:*:* |
| ibm | sametime | 8.5.2.1 | cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-0534
2013-06-21 14:00:00
nessus
nessus
IBM Notes 8.5 < 8.5.3 IF4 HF2 / 9.0 < 9.0 IF2 Password Disclosure
2013-06-20 00:00:00
IBM Lotus Sametime Connect Client Password Disclosure
2013-10-01 00:00:00
prion
prion
Default credentials
2013-06-21 14:55:00
nvd
nvd
CVE-2013-0534
2013-06-21 14:55:01
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2013-0534