Session Variable Exposure in IBM Lotus Sametime Enterprise Meeting Server
CVE-2013-3985

Currently unrated

Key Information:

Vendor

IBM
Status
Lotus Sametime
Vendor
CVE Published:
9 November 2013

What is CVE-2013-3985?

The Enterprise Meeting Server in IBM Lotus Sametime versions 8.5.2 and 8.5.2.1 comes with a vulnerability that stems from inadequate restrictions on application cookies. As a result, a remote attacker could exploit a weakly configured Domain variable, potentially enabling them to read and access sensitive session variables. This flaw underscores the importance of proper cookie management to ensure user session integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg21654355
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/84968
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.