CVE-2013-0487 in Lotus Domino

Summary

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/16/2012
• Disclosure: 03/27/2013
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00606
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-0487
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-0487
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-0487/