cbcvebase.
CVE-2013-3985
published 2013-11-09

CVE-2013-3985: The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read…

PriorityP412low2.9CVSS 2.0
AVAACMAuNCPINAN
EPSS
0.53%
41.7th percentile
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmlotus_sametime——
ibmlotus_sametime——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.