CVE-2013-0522: Infoleak
The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0522?
CVE-2013-0522 has a medium severity rating due to its potential to allow local users to discover passwords.
How do I fix CVE-2013-0522?
To fix CVE-2013-0522, update your IBM Notes to the latest version that addresses this vulnerability.
Which versions of IBM Notes are affected by CVE-2013-0522?
CVE-2013-0522 affects IBM Notes versions 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows.
What kind of attack can exploit CVE-2013-0522?
CVE-2013-0522 can be exploited by local users through an unspecified communication mechanism that allows password discovery.
Is there a workaround for CVE-2013-0522?
There are no official workarounds for CVE-2013-0522; upgrading to a patched version is recommended.