« Volver al listado

CVE-2013-3046

Estado: ModificadaMedia (4.3)—

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Sametime

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3046",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-26T04:29:15.677",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21671201",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84819",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21671201",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84819",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests."
    },
    {
      "lang": "es",
      "value": "Meeting Server en IBM Sametime 8.x hasta 8.5.2.1 y 9.x hasta 9.0.0.1 no envía la cabecera HSTS Strict-Transport-Security, lo que facilita a atacantes man-in-the-middle secuestrar sesiones u obtener información sensible mediante el aprovechamiento de la presencia de solicitudes HTTP."
    }
  ],
  "lastModified": "2026-06-16T23:54:26.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CE27A8A-3655-41E5-9FAD-A9172300812E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "836C482E-EEA8-4BAD-93CF-558BF94E7484"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.0.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47702E19-5102-4982-A51D-D9890BFE2718"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.0.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B08A1498-47E4-42A1-9563-F92485E70683"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0599D508-931E-4D97-BCC5-73F9631013CC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.5.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5ACDB888-CB6C-41DD-B57E-65237A5A8EF5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.5.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3123052-F774-4929-932E-D6262581F3C1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED661C82-9230-4501-BD87-26E68FD264C6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D106630-D04F-406F-A3BD-029777B8E8F9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A84C4658-AEE7-4C63-A188-795B8FEB3A47"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "624F11B5-9305-49E9-A7F1-45845234BFD6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E5B5DF0-0678-4E47-AC68-E24B5A93597D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}