Skip to content
Sign in
Not rated

CVE-2016-2965 IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation…

Description

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846.

Affected products and versions

Product Affected versions Fixed in
Sametime 9.0 9.0 → 9.0.1 No fix stated
Sametime 8.5 8.5.2 → 8.5.2.1 No fix stated

Other CVEs of Sametime

The 22 CVEs of Sametime →
CVE-2016-2964 IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may… Not rated CVE-2016-2976 IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive… Not rated CVE-2016-2975 IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Not rated CVE-2016-2978 IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be… Not rated
Track this CVE