CVE-2012-3331 - Vulnerability Details

Vendors	Products
Ibm	Sametime

Link	Providers
http://www-01.ibm.com/support/docview.wss?uid=swg21613895
https://exchange.xforce.ibmcloud.com/vulnerabilities/78048

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-10-15T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-02-08T22:57:02", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "lotus-sametime-stlog-info-disclosure(78048)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78048"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2012-3331", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "lotus-sametime-stlog-info-disclosure(78048)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78048"}, {"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:10.811Z"}, "title": "CVE Program Container", "references": [{"name": "lotus-sametime-stlog-info-disclosure(78048)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78048"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2012-3331", "datePublished": "2018-02-08T23:00:00", "dateReserved": "2012-06-07T00:00:00", "dateUpdated": "2024-08-06T20:05:10.811Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2012-10-15T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-02-08T22:57:02 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

name : lotus-sametime-stlog-info-disclosure(78048) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2012-3331 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : lotus-sametime-stlog-info-disclosure(78048) (string)

refsource : XF (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 (string)

}

1 : { »

name : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

refsource : CONFIRM (string)

url : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T20:05:10.811Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : lotus-sametime-stlog-info-disclosure(78048) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2012-3331 (string)

datePublished : 2018-02-08T23:00:00 (string)

dateReserved : 2012-06-07T00:00:00 (string)

dateUpdated : 2024-08-06T20:05:10.811Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:sametime:6.5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "3A77C1DC-C184-4B17-B93B-A91A9E321792", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:7.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "526F15EB-7430-4A05-83DD-F947E04EF7A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:7.5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "EEF4B1DF-3FC8-4C41-B7F4-A309CB133971", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:7.5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BC3F544C-F009-46A1-8496-7326AA4DC8A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:7.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "1B8846AB-0F30-4CA9-BE19-B78321C31285", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:7.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "3E3777B0-23DA-4250-9A12-865D77F1F271", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "4CE27A8A-3655-41E5-9FAD-A9172300812E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "836C482E-EEA8-4BAD-93CF-558BF94E7484", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.0.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B08A1498-47E4-42A1-9563-F92485E70683", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "5ACDB888-CB6C-41DD-B57E-65237A5A8EF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "C3123052-F774-4929-932E-D6262581F3C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "ED661C82-9230-4501-BD87-26E68FD264C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "F0A3B74D-CEFC-4D9F-BB3D-23717891100C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "4D106630-D04F-406F-A3BD-029777B8E8F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "A84C4658-AEE7-4C63-A188-795B8FEB3A47", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048."}, {"lang": "es", "value": "IBM Sametime permite que atacantes remotos obtengan informaci\u00f3n sensible de la base de datos de Sametime Log mediante una petici\u00f3n directa a STLOG.NSF. IBM X-Force ID: 78048."}], "id": "CVE-2012-3331", "lastModified": "2024-11-21T01:40:39.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-02-08T23:29:00.467", "references": [{"source": "psirt@us.ibm.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78048"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21613895"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78048"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:sametime:6.5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A77C1DC-C184-4B17-B93B-A91A9E321792 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:sametime:7.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 526F15EB-7430-4A05-83DD-F947E04EF7A7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:sametime:7.5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : EEF4B1DF-3FC8-4C41-B7F4-A309CB133971 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:sametime:7.5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : BC3F544C-F009-46A1-8496-7326AA4DC8A3 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:sametime:7.5.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 1B8846AB-0F30-4CA9-BE19-B78321C31285 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:sametime:7.5.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E3777B0-23DA-4250-9A12-865D77F1F271 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:sametime:8.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4CE27A8A-3655-41E5-9FAD-A9172300812E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:sametime:8.0.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 836C482E-EEA8-4BAD-93CF-558BF94E7484 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:sametime:8.0.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B08A1498-47E4-42A1-9563-F92485E70683 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5ACDB888-CB6C-41DD-B57E-65237A5A8EF5 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C3123052-F774-4929-932E-D6262581F3C1 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : ED661C82-9230-4501-BD87-26E68FD264C6 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : F0A3B74D-CEFC-4D9F-BB3D-23717891100C (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D106630-D04F-406F-A3BD-029777B8E8F9 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A84C4658-AEE7-4C63-A188-795B8FEB3A47 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. (string)

}

1 : { »

lang : es (string)

value : IBM Sametime permite que atacantes remotos obtengan información sensible de la base de datos de Sametime Log mediante una petición directa a STLOG.NSF. IBM X-Force ID: 78048. (string)

}

]

id : CVE-2012-3331 (string)

lastModified : 2024-11-21T01:40:39.490 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-02-08T23:29:00.467 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21613895 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object