What is CVE-2013-3977?

CVE-2013-3977 is a vulnerability in Ibm Sametime, classified under Improper Authentication. Published 2014-05-26.

Is CVE-2013-3977 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Ibm Sametime

CVE-2013-3977

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names.

Vulnerability class: Broken Authentication

EPSS: 0.090 (94.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Sametime — versions 8.0.0.0, 8.0.1.0, 8.0.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

Public proof-of-concept exploits

rapid7/metasploit-framework

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-3977?: CVE-2013-3977 is a vulnerability in Ibm Sametime, classified under Improper Authentication. Published 2014-05-26.
Is CVE-2013-3977 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.