CVE-2010-3398

Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21445669
http://www.securityfocus.com/bid/43220
http://www.vupen.com/english/advisories/2010/2380	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21445669
http://www.securityfocus.com/bid/43220
http://www.vupen.com/english/advisories/2010/2380	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:lotus_sametime::::::::
	cpe:2.3:a:ibm:lotus_sametime:1.5:::::::*
	cpe:2.3:a:ibm:lotus_sametime:2.5:::::::*
	cpe:2.3:a:ibm:lotus_sametime:7.0:::::::*
	cpe:2.3:a:ibm:lotus_sametime:7.5:::::::*
	cpe:2.3:a:ibm:lotus_sametime:7.5.1:::::::*
	cpe:2.3:a:ibm:lotus_sametime:8.0:::::::*
	cpe:2.3:a:ibm:lotus_sametime:8.0.1:::::::*
	cpe:2.3:a:ibm:lotus_sametime:8.0.2:::::::*
	cpe:2.3:a:ibm:lotus_sametime:8.5:::::::*

History

No history.

Information

Published : 2010-09-15 20:00

Updated : 2025-04-11 00:51

NVD link : CVE-2010-3398

Mitre link : CVE-2010-3398

CVE.ORG link : CVE-2010-3398

JSON object : View

Products Affected

ibm

lotus_sametime

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-3398", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-09-15T20:00:02.667", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21445669", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/43220", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/2380", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21445669", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/43220", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/2380", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en la implementaci\u00f3n webcontainer en IBM Lotus Sametime Connect v8.5.1 anterior a CF1 tiene un impacto y vectores de ataque desconocidos, tambi\u00e9n conocido como SPRs LXUU87S57H y LXUU87S93W."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07EA400E-7CA2-4E15-BBFD-11A9151B1C35", "versionEndIncluding": "8.5.1"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "456B61CF-5BAC-4C02-8531-A48B27C6D63F"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA2363D2-A6B1-48D6-B07D-6FCCFCAF72A3"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D39A4223-0F4B-4E29-A661-F8E4B1AC9785"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C5FF0F3-D0E6-4933-8826-50C5584D0615"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:7.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C2F7120-CD96-4817-97C3-470FC21B75B8"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6200D391-5317-4CF5-828F-5FB68C3B45E2"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71EB8C02-5EA3-4E16-8834-064AE4208BAA"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "802AC4A0-7A7A-44B4-8422-A3015D750493"}, {"criteria": "cpe:2.3:a:ibm:lotus_sametime:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "248C93BA-B1CA-41BF-AF1C-14D0E94CC0D2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}