Vulnerabilities > CVE-2013-3975 - Information Disclosure vulnerability in IBM Sametime Meeting Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ibm
metasploit
NVD
Published: 2014-05-26
Updated: 2017-08-29

Summary

Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search.

Vulnerable Configurations

Part Description Count
Application
Ibm
12

Metasploit

descriptionThis module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack (which is preferred), or a bruteforce attack trying all usernames of MAXDEPTH length or less.
idMSF:AUXILIARY/GATHER/IBM_SAMETIME_ENUMERATE_USERS
last seen2020-06-08
modified2017-07-24
published2013-12-26
references
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/gather/ibm_sametime_enumerate_users.rb
titleIBM Lotus Notes Sametime User Enumeration

References