cbcvebase.
CVE-2013-6742
published 2014-02-14

CVE-2013-6742: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it…

PriorityP335high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.31%
67.4th percentile
The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmsametime——
ibmsametime——
ibmsametime——
ibmsametime——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.