Description
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.
Unscored
CVE-2013-3985
EUVD-2013-3917GHSA-qmc3-45w6-449f
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote a…
Published Nov 9, 2013 · Updated Aug 6, 2024 · Assigned by ibm