CVE-2013-0522

Severity: high (CVSS 7.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-16 · updated 2026-06-16
Weakness: CWE-200

Description

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531.

Affected products

IBM Lotus Notes: 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2 (+2)

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/82531
https://www-01.ibm.com/support/docview.wss?uid=swg21634508
https://exchange.xforce.ibmcloud.com/vulnerabilities/82531
https://www-01.ibm.com/support/docview.wss?uid=swg21634508

Get alerted when CVE-2013-0522 or the next vulnerability affects your stack