CVE-2016-2974

Опубликовано: 29 авг. 2017

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22006444
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100528
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006444
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100528
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-72mx-gcxg-xg6f