CVE-2013-3977
IBM Sametime 8.x-8.5.2.1 and 9.x-9.0.0.1 - Meeting Room Enumeration via Valid User Names
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-3977.
PoCs published by kicks4kittens, including Metasploit module auxiliary/gather/ibm_sametime_room_brute.
AI-analyzed exploit summary This Metasploit module bruteforces IBM Lotus Notes Sametime meeting room names via the web interface. It checks for valid room names by querying the REST API and parsing JSON responses.
Description
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names.
Exploits (1)
This Metasploit module bruteforces IBM Lotus Notes Sametime meeting room names via the web interface. It checks for valid room names by querying the REST API and parsing JSON responses.