CVE-2013-3975

IBM Sametime <9.0.0.1 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search.

Exploits (1)

metasploit SCANNER

by kicks4kittens · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibm_sametime_enumerate_users.rb

View Code ZIP pw:eip

References (2)

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21671201

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/84855

Scores

EPSS 0.5175

EPSS Percentile 97.9%

Details

Status published

Products (12)

ibm/sametime 8.0.0.0

ibm/sametime 8.0.1.0

ibm/sametime 8.0.1.1

ibm/sametime 8.0.2.0

ibm/sametime 8.0.2.1

ibm/sametime 8.5.0.0

ibm/sametime 8.5.1.0

ibm/sametime 8.5.1.1

ibm/sametime 8.5.2.0

ibm/sametime 8.5.2.1

... and 2 more

Published May 26, 2014

Tracked Since Feb 18, 2026