IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Lotus_connections | Ibm | * | 2.0 (including) |
Lotus_connections | Ibm | 1.0.2 (including) | 1.0.2 (including) |