CVE Vulnerabilities

CVE-2013-6742

Published: Feb 14, 2014 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected Software

Name Vendor Start Version End Version
Sametime Ibm 8.5.2.0 (including) 8.5.2.0 (including)
Sametime Ibm 8.5.2.1 (including) 8.5.2.1 (including)
Sametime Ibm 9.0.0.0 (including) 9.0.0.0 (including)
Sametime Ibm 9.0.0.1 (including) 9.0.0.1 (including)

References