PT-2010-3162 · Ibm · Ibm Lotus Notes

Publicado 2010-04-20 · Atualizado 2017-09-19 · CVE-2010-1487

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes versions 7.0 through 8.5

Description The issue allows local users to obtain sensitive information by examining the SURunAs.exe file, which stores administrative credentials in cleartext.

Recommendations For versions 7.0 through 8.5, consider restricting access to the SURunAs.exe file to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-1487

Produtos afetados

Ibm Lotus Notes

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-1487 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1487 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14725 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21427073 · Nota
• http://secunia.com/advisories/39507 · Aviso do Fabricante
• http://securityfocus.com/bid/39525 · Nota