CVE-2013-0534

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-21 · updated 2026-06-16
Weakness: CWE-255

Description

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.

Affected products

IBM Lotus Sametime: 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1
IBM Sametime: 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21635218
https://exchange.xforce.ibmcloud.com/vulnerabilities/82656
http://www-01.ibm.com/support/docview.wss?uid=swg21635218
https://exchange.xforce.ibmcloud.com/vulnerabilities/82656

Get alerted when CVE-2013-0534 or the next vulnerability affects your stack