PT-2017-8279 · Ibm · Ibm Sametime

Publicado 2017-08-28 · Atualizado 2017-09-04 · CVE-2016-2970

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5 through 9.0

Description The issue allows an error message to provide detailed information about the application, potentially giving attackers valuable details.

Recommendations For IBM Sametime versions 8.5 through 9.0, consider modifying the error message handling to prevent the disclosure of sensitive application details until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-2970

Produtos afetados

Ibm Sametime

Referências · 6

• http://securityfocus.com/bid/100529 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2970 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2970 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22006233 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/113851 · Aviso do Fabricante
• http://securitytracker.com/id/1039228 · Nota