5
CVE-2011-1370
- EPSS 0.25%
- Published 29.10.2011 10:55:08
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Lotus Sametime Version7.0
Ibm ≫ Lotus Sametime Version7.5
Ibm ≫ Lotus Sametime Version7.5.0.1
Ibm ≫ Lotus Sametime Version7.5.1
Ibm ≫ Lotus Sametime Version7.5.1.1
Ibm ≫ Lotus Sametime Version7.5.1.2
Ibm ≫ Lotus Sametime Version8.0
Ibm ≫ Lotus Sametime Version8.0.1
Ibm ≫ Lotus Sametime Version8.0.2
Ibm ≫ Lotus Sametime Version8.5
Ibm ≫ Lotus Sametime Version8.5.1
Ibm ≫ Lotus Sametime Version8.5.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.458 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|