Description
IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.
References (4)
Core 4
Core References
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21427073
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/39525
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39507
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14725
Scores
EPSS
0.0035
EPSS Percentile
27.7%
Details
CWE
CWE-255
Status
published
Products (3)
ibm/lotus_notes
7.0
ibm/lotus_notes
8.0
ibm/lotus_notes
8.5
Published
Apr 20, 2010
Tracked Since
Feb 18, 2026