CVE-2011-1370

Currently unrated

Key Information:

Vendor
IBM
Status
Lotus Sametime
Vendor
CVE Published:
29 October 2011

Summary

The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/70923
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21569452
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.