IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
BID:50410
Info
IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
| Bugtraq ID: | 50410 |
| Class: | Design Error |
| CVE: |
CVE-2011-1370 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2011 12:00AM |
| Updated: | Oct 28 2011 12:00AM |
| Credit: | Reported by the vendor |
| Vulnerable: |
IBM Lotus Sametime 8.5.1 IBM Lotus Sametime 8.0.2 IBM Lotus Sametime 8.0.1 IBM Lotus Sametime 7.5.1 FP 1 IBM Lotus Sametime 7.5.1 IBM Lotus Sametime 8.5 IBM Lotus Sametime 8.0 IBM Lotus Sametime 7.5 IBM Lotus Sametime 7.0 |
| Not Vulnerable: | |
Discussion
IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
IBM Lotus Sametime is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive information.
IBM Lotus Sametime is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive information.
Exploit / POC
IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
An attacker can exploit this issue by using readily available tools.
An attacker can exploit this issue by using readily available tools.
Solution / Fix
IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
References:
References: