CVEvulnerability
CVE-2016-2974
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2017-08-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.
Affected configurations
• ibm sametime 8.5.2.0
• ibm sametime 8.5.2.1
• ibm sametime 9.0.0.0
• ibm sametime 9.0.0.1
• ibm sametime 9.0.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22006444 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/100528 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/113934 VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22006444 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/100528 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/113934 VDB Entry, Vendor Advisory