CVE-2016-2974

EPSS 0.06%
Published 29.08.2017 21:29:00
Last modified 20.04.2025 01:37:25
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Sametime Version8.5.2.0

Ibm ≫ Sametime Version8.5.2.1

Ibm ≫ Sametime Version9.0.0.0

Ibm ≫ Sametime Version9.0.0.1

Ibm ≫ Sametime Version9.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.165

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ibm.com/support/docview.wss?uid=swg22006444

Patch

Vendor Advisory

http://www.securityfocus.com/bid/100528

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/113934

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-2974

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-2974

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-2974

EUVD