CVE-2016-2972 - IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in t

CVE-2016-2972

Summary

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855.

References

Vulnerable Configurations

cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 07-09-2017 - 01:29)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	100599
confirm	http://www.ibm.com/support/docview.wss?uid=swg22006439
misc	https://exchange.xforce.ibmcloud.com/vulnerabilities/113855
sectrack	1039231

Last major update

07-09-2017 - 01:29

Published

29-08-2017 - 18:29

Last modified

07-09-2017 - 01:29