CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges.

Score

CVSS 2.0 3.5 Low

Status

Modified - psirt@us.ibm.com

Published

2013-11-09

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Lotus Sametime (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21654355
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84815