CVEvulnerability

CVE-2011-1370

5.0 MEDIUM Published 2011-10-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-10-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-16

Description

The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.

Affected configurations

• ibm lotus sametime 7.0 • ibm lotus sametime 7.5 • ibm lotus sametime 7.5.0.1 • ibm lotus sametime 7.5.1 • ibm lotus sametime 7.5.1.1 • ibm lotus sametime 7.5.1.2 • ibm lotus sametime 8.0 • ibm lotus sametime 8.0.1 • ibm lotus sametime 8.0.2 • ibm lotus sametime 8.5 • ibm lotus sametime 8.5.1 • ibm lotus sametime 8.5.2

Related

Weakness · not in database (1)

References