The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lotus_sametime | Ibm | 8.5.1 (including) | 8.5.1 (including) |
| Lotus_sametime | Ibm | 8.5.1.1 (including) | 8.5.1.1 (including) |
| Lotus_sametime | Ibm | 8.5.1.2 (including) | 8.5.1.2 (including) |
| Lotus_sametime | Ibm | 8.5.2 (including) | 8.5.2 (including) |
| Lotus_sametime | Ibm | 8.5.2.1 (including) | 8.5.2.1 (including) |
| Sametime | Ibm | 8.5.1 (including) | 8.5.1 (including) |
| Sametime | Ibm | 8.5.1.1 (including) | 8.5.1.1 (including) |
| Sametime | Ibm | 8.5.1.2 (including) | 8.5.1.2 (including) |
| Sametime | Ibm | 8.5.2 (including) | 8.5.2 (including) |
| Sametime | Ibm | 8.5.2.1 (including) | 8.5.2.1 (including) |