CVE-2010-1487: Low severity IBM Lotus Notes vulnerability
Published Apr 20, 2010
·Updated
IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.
Affected Software
3 affected components
IBM Lotus Notes=8.5
IBM Lotus Notes=7.0
IBM Lotus Notes=8.0
Event History
Apr 20, 2010
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1487?
CVE-2010-1487 is considered a high-severity vulnerability due to the exposure of sensitive administrative credentials.
2
How do I fix CVE-2010-1487?
To fix CVE-2010-1487, it is recommended to upgrade to a version of IBM Lotus Notes that does not store administrative credentials in cleartext.
3
Which versions of IBM Lotus Notes are affected by CVE-2010-1487?
IBM Lotus Notes versions 7.0, 8.0, and 8.5 are affected by CVE-2010-1487.
4
What type of information is exposed in CVE-2010-1487?
CVE-2010-1487 exposes sensitive administrative credentials stored in cleartext within the SURunAs.exe file.
5
Who can exploit the vulnerability CVE-2010-1487?
Local users can exploit CVE-2010-1487 by examining the SURunAs.exe file to obtain the sensitive information.