The Meeting Server in IBM Sametime 8.x up to and including 8.5.2.1 and 9.x up to and including 9.0.0.1 does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an http session.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm sametime 8.5.1.0 |
||
ibm sametime 8.5.0.0 |
||
ibm sametime 8.0.2.1 |
||
ibm sametime 8.0.2.0 |
||
ibm sametime 8.0.1.1 |
||
ibm sametime 8.5.1.1 |
||
ibm sametime 8.5.2.0 |
||
ibm sametime 9.0.0.0 |
||
ibm sametime 8.5.2.1 |
||
ibm sametime 8.0.1.0 |
||
ibm sametime 8.0.0.0 |
Vulmon