PT-2011-3089 · Ibm · Ibm Lotus Sametime

Published 2011-10-29 · Updated 2017-08-17 · CVE-2011-1370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 7.0 through 8.5.2

Description The default configuration of the Sametime configuration servlet (SCS) in the server does not enable an authentication requirement. This allows remote attackers to read the configuration settings by examining a response message.

Recommendations For IBM Lotus Sametime versions 7.0 through 8.5.2, enable the authentication requirement for the Sametime configuration servlet (SCS) to prevent unauthorized access to configuration settings.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2011-1370

Affected Products

Ibm Lotus Sametime

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-1370 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21569452 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70923 · Note