CVE-2014-3088

IBM Sametime Meeting Server 8.5.1 is affected by CVE-2014-3088 due to stconf.nsf relying on the client to validate the file format in wAttach?OpenForm multipart/form-data POSTs. This allows remote authenticated users to bypass upload restrictions by modifying the Content-Type header and file exte...