CVE Vulnerabilities

CVE-2013-6742

Published: Feb 14, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected Software

Name Vendor Start Version End Version
Sametime Ibm 8.5.2.0 (including) 8.5.2.0 (including)
Sametime Ibm 8.5.2.1 (including) 8.5.2.1 (including)
Sametime Ibm 9.0.0.0 (including) 9.0.0.0 (including)
Sametime Ibm 9.0.0.1 (including) 9.0.0.1 (including)

References