CVE-2013-6727: Medium severity IBM Sametime vulnerability
Published Jan 31, 2014
·Updated
The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Software
3 affected components
IBM Sametime=8.5.2.0
IBM Sametime=8.5.2.1
IBM Sametime=9.0.0.0
Event History
Jan 31, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6727?
CVE-2013-6727 has a medium severity rating as it allows remote attackers to access sensitive information.
2
How do I fix CVE-2013-6727?
To fix CVE-2013-6727, upgrade to IBM Sametime version 8.5.2.2 or higher, or to version 9.0 after applying HF1.
3
What versions of IBM Sametime are affected by CVE-2013-6727?
CVE-2013-6727 affects IBM Sametime versions 8.5.2 through 8.5.2.1 and 9.0 before HF1.
4
What types of attacks are possible with CVE-2013-6727?
CVE-2013-6727 allows attackers to obtain sensitive information through the exploitation of unsigned Java plugins.
5
Is there a workaround for CVE-2013-6727 if I cannot upgrade?
There is no effective workaround for CVE-2013-6727, and upgrading is strongly recommended.