CVEvulnerability
CVE-2013-6727
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected configurations
• ibm sametime 8.5.2.0
• ibm sametime 8.5.2.1
• ibm sametime 9.0.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21662725 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89282 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21662725 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89282 exchange.xforce.ibmcloud.com