Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Lotus_cc_mail | Ibm | 8.0 (including) | 8.0 (including) |
References