CVE-2013-0534

CWE-2553 documents3 sources
Severity
1.9LOW
EPSS
0.1%
top 84.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Lotus SametimeIBM Sametime
Timeline
PublishedJun 21
Latest updateMay 5

Description

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/lotus_sametime5 versions+4
▶NVDibm/sametime5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-pjp6-jx8r-j23r: The Connect client in IBM Sametime 8↗2022-05-05
▶
CVEList
CVE-2013-0534: The Connect client in IBM Sametime 8↗2013-06-21
▶
CVE-2013-0534 (LOW CVSS 1.9) | The Connect client in IBM Sametime | cvebase.io