PT-2011-3089 · Ibm · Ibm Lotus Sametime

Publicado 2011-10-29 · Atualizado 2017-08-17 · CVE-2011-1370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 7.0 through 8.5.2

Description The default configuration of the Sametime configuration servlet (SCS) in the server does not enable an authentication requirement. This allows remote attackers to read the configuration settings by examining a response message.

Recommendations For IBM Lotus Sametime versions 7.0 through 8.5.2, enable the authentication requirement for the Sametime configuration servlet (SCS) to prevent unauthorized access to configuration settings.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2011-1370

Produtos afetados

Ibm Lotus Sametime

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21569452 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70923 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1370 · Nota de Segurança