Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Sametime 配置设置读取漏洞
Vulnerability Description
IBM Lotus Sametime是美国IBM公司的一套即时通讯软件。该软件集成了企业即时消息传递、网络会议、电话和视频会议，企业内外的人员可实时进行远程协作。 IBM Lotus Sametime 7.0到8.5.2版本中存在漏洞。由于服务器的Sametime configuration servlet (SCS)的默认配置不能够认证需求，远程攻击者可通过检查响应消息读取配置设置。
CVSS Information
N/A
Vulnerability Type
N/A