CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read…

published November 9, 2013

CVSS
—
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00532 · 44.2th percentile
Published
2013-11-09T01:00Z
EPSS history
Timeline
  • 09 NOV 01:00Z
    The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read…
    cvelistv5