VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 1, 2014· Updated Jun 17, 2026

CVE-2014-3088

CVE-2014-3088

Description

stconf.nsf in IBM Sametime Meeting Server 8.5.1 relies on the client to validate the file format used in wAttach?OpenForm multipart/form-data POST requests, which allows remote authenticated users to bypass intended upload restrictions by modifying the Content-Type header and file extension, as demonstrated by replacing a text/plain .txt upload with an application/octet-stream .exe upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Sametime Meeting Server2 versions
    cpe:2.3:a:ibm:sametime_meeting_server:8.5.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:sametime_meeting_server:8.5.1:*:*:*:*:*:*:*
    • (no CPE)range: 8.5.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.