CVE-2013-6742 — IBM Sametime vulnerability

CWE-2643 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 31.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sametime
Timeline
PublishedFeb 14
Latest updateMay 17

Description

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/sametime4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-35pv-8c58-rxqx: The Meeting Server in IBM Sametime 8↗2022-05-17
▶
CVEList
CVE-2013-6742: The Meeting Server in IBM Sametime 8↗2014-02-13
▶
CVE-2013-6742 — IBM Sametime vulnerability | cvebase