Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Lotus_cc_mail |
Ibm |
8.0 (including) |
8.0 (including) |
References