PT-2016-4145 · Ibm+1 · Ibm Personal Communications+1

Published 2016-07-17 · Updated 2016-11-28 · CVE-2016-0321

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Personal Communications (aka PCOMM) versions 6.x through 6.0.16 IBM Personal Communications (aka PCOMM) versions 12.x through 12.0.0.0

Description The issue allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script, due to improper restriction of credential extraction.

Recommendations For IBM Personal Communications (aka PCOMM) versions 6.x through 6.0.16, update to version 6.0.17 or later. For IBM Personal Communications (aka PCOMM) versions 12.x through 12.0.0.0, update to version 12.0.0.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0321

Affected Products

Ibm Personal Communications

Powershell

References · 5

• https://osv.dev/vulnerability/CVE-2016-0321 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21981692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0321 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006 · Vendor Advisory
• http://securityfocus.com/bid/91751 · Note