Unrated severityNVD Advisory· Published Nov 9, 2013· Updated Apr 29, 2026
CVE-2013-3985
CVE-2013-3985
Description
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.
Affected products
2cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/84968nvd
News mentions
0No linked articles in our index yet.