PT-2019-11699 · Jenkins · Jenkins Sametime Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sametime Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the credential...

CVE-2019-10297: Insufficiently Protected Credentials

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

sametime stores credentials in plain text

sametime stores credentials unencrypted in its global configuration file hudson.plugins.sametime.im.transport.SametimePublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

IBM Sametime Information Disclosure Vulnerability (CNVD-2018-06309)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime. A remote attacker can exploit this...

IBM Sametime Detection

Detection of IBM Sametime. The script sends a connection request to the server and attempts to detect IBM Sametime. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

CVE-2012-3331

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

CVE-2012-3331

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

CVE-2012-3331

IBM Sametime is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data from the Sametime Log database by making a direct request to STLOG.NSF. The available references describe the issue as an information leak (X-Force ID 78048) but do not provide pro...

CVE-2012-3331: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

PT-2018-4049

Name of the Vulnerable Software and Affected Versions IBM Sametime affected versions not specified Description The issue allows remote attackers to obtain sensitive information from the Sametime Log database. This is achieved by making a direct request to the STLOG.NSF endpoint. Recommendations A...

IBM Sametime Cross-Site Scripting Vulnerability (CNVD-2017-27544)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A cross-site scripting vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. A remo...

IBM Sametime Meeting Server Information Disclosure Vulnerability (CNVD-2017-27543)

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in Sametime chat and...

IBM Sametime Session Enumeration Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. An attacker could...

IBM Sametime Information Disclosure Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0, which can be...

IBM Sametime Connect Information Disclosure Vulnerability (CNVD-2017-30565)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. IBM Sametime Connect is a client for IBM Sametime, a set of next-generation social communication tools from IBM that help users realize real-time business collaboration by integrating audio voice,...

IBM Sametime Cross-Site Scripting Vulnerability (CNVD-2017-30589)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A cross-site scripting vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. A remo...

IBM Sametime Web Player Arbitrary Script Injection Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.IBM Sametime WebPlayer is one of the video-enabled plug-ins designed for browsers. A securi...

IBM Sametime Information Disclosure Vulnerability (CNVD-2017-30592)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. A local attacker...

IBM Sametime Information Disclosure Vulnerability (CNVD-2017-30590)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.1 and 9.0. An attacker can...