Lucene search
HistoryOct 29, 2011 - 10:55 a.m.
CVE-2011-1370
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
68.5%
The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.
Affected configurations
Node
ibmlotus_sametimeMatch7.0
ORibmlotus_sametimeMatch7.5
ORibmlotus_sametimeMatch7.5.0.1
ORibmlotus_sametimeMatch7.5.1
ORibmlotus_sametimeMatch7.5.1.1
ORibmlotus_sametimeMatch7.5.1.2
ORibmlotus_sametimeMatch8.0
ORibmlotus_sametimeMatch8.0.1
ORibmlotus_sametimeMatch8.0.2
ORibmlotus_sametimeMatch8.5
ORibmlotus_sametimeMatch8.5.1
ORibmlotus_sametimeMatch8.5.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_sametime | 7.0 | cpe:2.3:a:ibm:lotus_sametime:7.0:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 7.5 | cpe:2.3:a:ibm:lotus_sametime:7.5:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 7.5.0.1 | cpe:2.3:a:ibm:lotus_sametime:7.5.0.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 7.5.1 | cpe:2.3:a:ibm:lotus_sametime:7.5.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 7.5.1.1 | cpe:2.3:a:ibm:lotus_sametime:7.5.1.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 7.5.1.2 | cpe:2.3:a:ibm:lotus_sametime:7.5.1.2:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.0 | cpe:2.3:a:ibm:lotus_sametime:8.0:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.0.1 | cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.0.2 | cpe:2.3:a:ibm:lotus_sametime:8.0.2:*:*:*:*:*:*:* |
| ibm | lotus_sametime | 8.5 | cpe:2.3:a:ibm:lotus_sametime:8.5:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2011-1370
2011-10-29 10:55:08
cvelist
cvelist
CVE-2011-1370
2011-10-29 10:00:00
prion
prion
Default configuration
2011-10-29 10:55:00
seebug
seebug
IBM Lotus Sametime配置Servlet验证安全绕过漏洞
2011-11-01 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
68.5%
Related for NVD:CVE-2011-1370