CVE-2008-4807

published 2008-10-31

CVE-2008-4807: IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive…

low 2.1 CVSS 3.1

AV L AC L Au N C P I N A N

IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_connections	<= 2.0	—
ibm	lotus_connections	—	—

CWE-255