Vulnerability Details : CVE-2016-2974
IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.
Vulnerability category: Information leak
Products affected by CVE-2016-2974
- cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-2974
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 18 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-2974
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST | |
|
3.3
|
LOW | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
1.8
|
1.4
|
NIST |
CWE ids for CVE-2016-2974
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-2974
-
http://www.ibm.com/support/docview.wss?uid=swg22006444
IBM Security Bulletin: Security vulnerabilities in IBM Sametime Connect client (CVE-2016-0243, CVE-2016-2974)Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/100528
IBM Sametime Connect Client CVE-2016-2974 Information Disclosure VulnerabilityThird Party Advisory;VDB Entry
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934
IBM Sametime Connect information disclosure CVE-2016-2974 Vulnerability ReportVDB Entry;Vendor Advisory
Jump to