CVE-2013-3981: Medium severity IBM Sametime vulnerability
Published May 26, 2014
·Updated
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avatar photos of arbitrary users via unspecified vectors.
Affected Software
12 affected components
IBM Sametime=8.0.0.0
IBM Sametime=8.0.1.0
IBM Sametime=8.0.1.1
IBM Sametime=8.0.2.0
IBM Sametime=8.0.2.1
IBM Sametime=8.5.0.0
IBM Sametime=8.5.1.0
IBM Sametime=8.5.1.1
IBM Sametime=8.5.2.0
IBM Sametime=8.5.2.1
IBM Sametime=9.0.0.0
IBM Sametime=9.0.0.1
Event History
May 26, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·04:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3981?
CVE-2013-3981 is classified as a moderate severity vulnerability due to its potential for unauthorized access to user avatar photos.
2
How do I fix CVE-2013-3981?
To fix CVE-2013-3981, update your IBM Sametime software to the latest version, specifically beyond 9.0.0.1.
3
What systems are affected by CVE-2013-3981?
CVE-2013-3981 affects IBM Sametime versions 8.x through 8.5.2.1 and 9.x through 9.0.0.1.
4
What kind of attack can exploit CVE-2013-3981?
CVE-2013-3981 can be exploited by remote attackers to download avatar photos of arbitrary users.
5
Are there workarounds for CVE-2013-3981?
Currently, the best approach to mitigate CVE-2013-3981 is to apply the available patches or updates from IBM.