NVD

Id
38922  
Name
CVE-2013-3046  
Description
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-05-26  
Modified Date
2014-07-16  
Seq
2013-3046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199507 38922 CVE-2013-3046 http://www-01.ibm.com/support/docview.wss?uid=swg21671201  View
199508 38922 CVE-2013-3046 sametime-cve20133046-weak-security(84819)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24929 JVNDB-2013-006504 IBM Sametime の Meeting Server におけるセッションをハイジャックされる脆弱性 IBM Sametime の Meeting Server は、HSTS Strict-Transport-Security ヘッダを送信しないため、セッションをハイジャックされる、または重要な情報を取得される脆弱性が存在します。 CVE-2013-3046 62988 CVE-2013-3046 38922 2.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006504.html 2013-04-12 2014-05-28 View