CVE-2016-2974

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

CVSS v3 3.3 LOW
CVSS v2.0 2.1 LOW

3.3^/10

CVSS v3 : LOW

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg22006444	Patch Vendor Advisory
http://www.securityfocus.com/bid/100528	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934	VDB Entry Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:sametime:8.5.2.0:::::::*
	cpe:2.3:a:ibm:sametime:8.5.2.1:::::::*
	cpe:2.3:a:ibm:sametime:9.0.0.0:::::::*
	cpe:2.3:a:ibm:sametime:9.0.0.1:::::::*
	cpe:2.3:a:ibm:sametime:9.0.1:::::::*

History

No history.

Information

Published : 2017-08-29 21:29

Updated : 2023-12-10 12:15

NVD link : CVE-2016-2974

Mitre link : CVE-2016-2974

CVE.ORG link : CVE-2016-2974

JSON object : View

Products Affected

ibm

sametime

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2016-2974", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "published": "2017-08-29T21:29:00.340", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg22006444", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/100528", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/113934", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934."}, {"lang": "es", "value": "IBM Sametime Connect 8.5.2 y 9.0, despu\u00e9s de desinstalar Sametime Rich Client, podr\u00eda divulgar informaci\u00f3n potencialmente sensible sobre el entorno de Sametime, as\u00ed como de otros usuarios que se encuentren en la misma m\u00e1quina local del usuario. IBM X-Force ID: 113934."}], "lastModified": "2017-09-01T18:13:21.930", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D106630-D04F-406F-A3BD-029777B8E8F9"}, {"criteria": "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A84C4658-AEE7-4C63-A188-795B8FEB3A47"}, {"criteria": "cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "624F11B5-9305-49E9-A7F1-45845234BFD6"}, {"criteria": "cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E5B5DF0-0678-4E47-AC68-E24B5A93597D"}, {"criteria": "cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6F45A7B-1865-400A-A2E0-6E7BE46F6C8C"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}