Описание
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_sametime:8.5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.0005
Низкий
1.9 Low
CVSS2
Дефекты
CWE-255
Связанные уязвимости
github
почти 4 года назад
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.
EPSS
Процентиль: 16%
0.0005
Низкий
1.9 Low
CVSS2
Дефекты
CWE-255