CVE-2016-10503: Input Validation

Published Aug 29, 2017

Updated

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803.

Affected Software

5 affected components

IBM Sametime=8.5.2.0

IBM Sametime=8.5.2.1

IBM Sametime=9.0.0.0

IBM Sametime=9.0.0.1

IBM Sametime=9.0.1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22006439

Event History

Aug 29, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-10503?

CVE-2016-10503 is considered a moderate severity vulnerability due to its potential impact on meeting integrity.

How do I fix CVE-2016-10503?

To fix CVE-2016-10503, update your IBM Sametime Meeting Server to the latest patched version as recommended by IBM.

Who is affected by CVE-2016-10503?

Users of IBM Sametime Meeting Server versions 8.5.2, 8.5.2.1, 9.0.0.0, 9.0.0.1, and 9.0.1 are affected by CVE-2016-10503.

What are the risks associated with CVE-2016-10503?

The risks associated with CVE-2016-10503 include the potential for vote manipulation during meetings, leading to compromised decision-making.

Is CVE-2016-10503 a local or remote vulnerability?

CVE-2016-10503 is a local vulnerability that can be exploited by authenticated users during an e-meeting.