PT-2016-4145 · Ibm+1 · Ibm Personal Communications+1

Publicado 2016-07-17 · Atualizado 2016-11-28 · CVE-2016-0321

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Personal Communications (aka PCOMM) versions 6.x through 6.0.16 IBM Personal Communications (aka PCOMM) versions 12.x through 12.0.0.0

Description The issue allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script, due to improper restriction of credential extraction.

Recommendations For IBM Personal Communications (aka PCOMM) versions 6.x through 6.0.16, update to version 6.0.17 or later. For IBM Personal Communications (aka PCOMM) versions 12.x through 12.0.0.0, update to version 12.0.0.1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0321

Produtos afetados

Ibm Personal Communications

Powershell

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-0321 · Aviso do Fabricante
• http://securityfocus.com/bid/91751 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21981692 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0321 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006 · Aviso do Fabricante