IBM Sametime Proxy Server Multiple Security Vulnerabilities

Bugtraq ID:	100572
Class:	Unknown
CVE:	CVE-2016-0243 CVE-2016-0358 CVE-2016-2978 CVE-2016-2964 CVE-2016-2975 CVE-2016-2967 CVE-2016-2966 CVE-2016-2976
Remote:	Yes
Local:	No
Published:	Aug 25 2017 12:00AM
Updated:	Apr 12 2019 09:00PM
Credit:	The vendor reported the issue.
Vulnerable:	IBM Sametime 9.0.1 IBM Sametime 9.0.0.1 IBM Sametime 9.0.0.0 IBM Sametime 8.5.2.1 IBM Sametime 8.5.2.0
Not Vulnerable:	IBM Sametime 9.0.1 FP1

IBM Sametime Proxy Server Multiple Security Vulnerabilities

IBM Sametime Proxy Server is prone to the following security vulnerabilities:

1. Multiple authentication-bypass vulnerabilities.
2. Multiple cross-site scripting vulnerabilities.
3. Multiple information disclosure vulnerabilities.

An attacker may leverage these issues to execute script codes in the browser of an unsuspecting user in the context of the affected site, perform certain unauthorized actions actions, or bypass certain security restrictions and to gain sensitive information.

IBM Sametime 8.5.2, 8.5.2.1, 9.0, 9.0.0.1 and 9.0.1 are vulnerable.

IBM Sametime Proxy Server Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Sametime Proxy Server Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sametime Proxy Server Multiple Security Vulnerabilities

References:

• IBM Homepage (IBM)
  
• swg22006441:Various Security Vulnerabilities in IBM Sametime Proxy Server (IBM)