PT-2017-7613 · Ibm · Ibm Sametime

Publicado 2017-08-29 · Atualizado 2017-09-03 · CVE-2016-0358

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0

Description The issue allows an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to.

Recommendations For versions 8.5.2 through 9.0, update to a version that includes the fix for this issue to prevent unauthorized access to group chats and meetings.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0358

Produtos afetados

Ibm Sametime

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/111928 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-0358 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0358 · Nota de Segurança
• http://securityfocus.com/bid/100572 · Nota
• http://ibm.com/support/docview.wss?uid=swg22006441 · Aviso do Fabricante