Description
IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21427073
- 39525 vdb-entry
- 39507 third-party-advisory
- oval:org.mitre.oval:def:14725 vdb-entry signature