Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-0522


The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531.


Published

2018-07-16T14:29:00.277

Last Modified

2024-11-21T01:47:43.407

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.0 (HIGH)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm lotus_notes 8.0 Yes
Application ibm lotus_notes 8.0.1 Yes
Application ibm lotus_notes 8.0.2 Yes
Application ibm lotus_notes 8.5 Yes
Application ibm lotus_notes 8.5.1 Yes
Application ibm lotus_notes 8.5.2 Yes
Application ibm lotus_notes 8.5.3 Yes
Application ibm lotus_notes 9.0 Yes

References