NetSight
high7.5

CVE-2013-3983

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which…

Impact

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.

Affected products

VendorProductAffected versions
IbmSametime
Versions 8.5.2.0, 8.5.2.1, 9.0.0.0, 9.0.0.1

Weakness classification

References