CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

Design/Logic Flaw

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

CVE-2016-0355: Cross-Site Request Forgery (CSRF)

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111894...

PT-2017-8288

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

IBM Sametime Media Server Information Disclosure Vulnerability

IBM Sametime Media Server is a set of media servers for Sametime chat and conferencing from IBM in the United States. An information disclosure vulnerability exists in IBM Sametime Media Server versions 9 and 8.5, which stems from detailed application information appearing in error messages. An...

CVE-2016-2970: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

CVE-2016-2964: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813...

PT-2017-8274

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue provides an error message to a user that is too detailed and may reveal details about the application. Recommendations For IBM Sametime versions 8.5.2 through 9.0, consider...

PT-2017-7611

Name of the Vulnerable Software and Affected Versions IBM Sametime Enterprise Meeting Server versions 8.5.2 through 9.0 Description The issue allows an authenticated user invited to a meeting room to cause screen sharing to cease through cross-site request forgery. Recommendations For versions...

PT-2017-7612

Name of the Vulnerable Software and Affected Versions IBM Sametime Enterprise Meeting Server versions 8.5.2 through 9.0 Description The issue allows an authenticated user invited to a meeting room to cause screen sharing to cease through cross-site request forgery. Recommendations For versions...

PT-2017-7613

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue allows an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. Recommendations For versions 8.5.2 through 9.0, update to ...

PT-2017-8275

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue is caused by improper validation of user-supplied input, allowing for cross-site request forgery. A remote attacker could force a user to log out of Sametime by...

PT-2017-8276

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.1 through 9.0 Description The issue allows an authenticated user to enumerate meeting rooms by guessing the meeting room id. Recommendations For versions 8.5.1 through 9.0, consider restricting access to meeting room...

PT-2017-8273

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a meeting room manager to remove the primary manager's privileges. Recommendations For IBM Sametime Meeting Server versions 8.5.2 through 9.0, consider...

PT-2017-8278

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows IBM Sametime Meeting Server to send replies that contain emails of people who should not be included in these messages. Recommendations For versions 8.5.2...

PT-2017-8283

Name of the Vulnerable Software and Affected Versions IBM Sametime Connect versions 8.5.2 through 9.0 Description The issue could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user, after uninstalling the Sametime...

PT-2017-8284

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2017-8285

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. Recommendations For IBM Sametime Meeting Server...

PT-2017-8287

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue allows potentially sensitive information from the browser cache to be stored locally, making it accessible to a local user. Recommendations For IBM Sametime versions 8.5.2 through...

PT-2017-8286

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a malicious user to lower other users' hands in a meeting, potentially disrupting the meeting process. Recommendations For versions 8.5.2 through 9.0, at the...