CVE-2012-3331

MEDIUM

IBM Sametime - Unauthenticated Exposure of Sensitive Information via STLOG.NSF Direct Request

Title source: llm

Description

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048.

References (2)

Core 2

Core References

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/78048

Mitigation, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21613895

Scores

CVSS v3 5.3

EPSS 0.0174

EPSS Percentile 75.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (15)

ibm/sametime 6.5.1.0

ibm/sametime 7.0.0.0

ibm/sametime 7.5.0.0

ibm/sametime 7.5.1.0

ibm/sametime 7.5.1.1

ibm/sametime 7.5.1.2

ibm/sametime 8.0.0.0

ibm/sametime 8.0.1.0

ibm/sametime 8.0.2.0

ibm/sametime 8.5.0.0

... and 5 more

Published Feb 08, 2018

Tracked Since Feb 18, 2026