PT-2017-8279 · Ibm · Ibm Sametime

Published 2017-08-28 · Updated 2017-09-04 · CVE-2016-2970

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5 through 9.0

Description The issue allows an error message to provide detailed information about the application, potentially giving attackers valuable details.

Recommendations For IBM Sametime versions 8.5 through 9.0, consider modifying the error message handling to prevent the disclosure of sensitive application details until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-2970

Affected Products

Ibm Sametime

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-2970 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2970 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22006233 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/113851 · Vendor Advisory
• http://securityfocus.com/bid/100529 · Note
• http://securitytracker.com/id/1039228 · Note