{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-06-12T00:00:00", "descriptions": [{"lang": "en", "value": "The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21635218"}, {"name": "notes-cve20130534-info-disclosure(82656)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82656"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2013-0534", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21635218", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21635218"}, {"name": "notes-cve20130534-info-disclosure(82656)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82656"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2013-0534", "datePublished": "2013-06-21T14:00:00", "dateReserved": "2012-12-16T00:00:00", "dateUpdated": "2017-08-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "F8112891-92F2-4EB9-9BBF-6FAB0C415368", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "027CB674-3C7A-44A0-8912-508BD3FA6CC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "3DD44793-F90F-4323-9264-533481A0627E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "15F87653-1AF5-4F84-9132-0B51AE6058EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "8EDFDA5F-7C63-472B-8246-EA1EFC2590E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "560B6125-BCB9-4643-A738-431E4703C0D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "ED661C82-9230-4501-BD87-26E68FD264C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "F0A3B74D-CEFC-4D9F-BB3D-23717891100C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "9BE89A24-6CD5-4881-94A9-A2E2E019D66F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "A84C4658-AEE7-4C63-A188-795B8FEB3A47", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory."}, {"lang": "es", "value": "El cliente Connect en IBM Sametime v8.5.1, v8.5.1.1, v8.5.1.2, v8.5.2, y v8.5.2.1, como se usaba en el cliente Lotus Notes puede permitir a usuarios locales obtener informaci\u00f3n sensible mediante el aprovechamiento de contrase\u00f1as persistentes en texto plano dentro de la memoria del proceso."}], "id": "CVE-2013-0534", "lastModified": "2017-08-29T01:33:05.417", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-06-21T14:55:01.107", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21635218"}, {"source": "psirt@us.ibm.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82656"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-255"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}