IBM Sametime Classic Meeting Server CVE-2014-4747 Information Disclosure Vulnerability

Bugtraq ID:	68823
Class:	Input Validation Error
CVE:	CVE-2014-4747
Remote:	No
Local:	Yes
Published:	Jul 18 2014 12:00AM
Updated:	Jul 18 2014 12:00AM
Credit:	Adriano Marcio Monteiro
Vulnerable:	IBM Sametime Classic Meeting Server 8.5.2 1 IBM Sametime Classic Meeting Server 8.5.2 IBM Sametime Classic Meeting Server 8.5.1 2 IBM Sametime Classic Meeting Server 8.0.2 IBM Sametime Classic Meeting Server 8.0.1 IBM Sametime Classic Meeting Server 8.5.1.1 IBM Sametime Classic Meeting Server 8.5
Not Vulnerable:

IBM Sametime Classic Meeting Server CVE-2014-4747 Information Disclosure Vulnerability

IBM Sametime Classic Meeting Server is prone to an information-disclosure vulnerability.

Local attackers can exploit this issue to disclose sensitive information. Information obtained may lead to further attacks.

IBM Sametime Classic Meeting Server CVE-2014-4747 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

IBM Sametime Classic Meeting Server CVE-2014-4747 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Sametime Meeting Server Homepage (IBM)
  
• Multiple Vulnerabilities in Sametime Classic Meeting Server (IBM)