Vulnerability in IBM Sametime

CVE-2013-6727

The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors.

EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Sametime — versions 8.5.2.0, 8.5.2.1, 9.0.0.0
  • N/a — versions n/a

Weakness classification (CWE)

References