NetSight
low2.9

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read ses…

Impact

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.

Affected products

VendorProductAffected versions
IbmLotus Sametime
Versions 8.5.2, 8.5.2.1

Weakness classification

References