CVE-2010-1487: IBM Lotus Notes

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.

Affected products

• IBM Lotus Notes: version 7.0 only; version 8.0 only; version 8.5 only

Published 2010-04-20. Last modified 2026-06-16.