CVE-2016-2974 IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the loca...
LowCVSS 3.3
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm sametime | = 8.5.2.0 | No fix listed |
| ibm sametime | = 8.5.2.1 | No fix listed |
| ibm sametime | = 9.0.0.0 | No fix listed |
| ibm sametime | = 9.0.0.1 | No fix listed |
| ibm sametime | = 9.0.1 | No fix listed |
| ibm sametime | = 8.5.2 | No fix listed |
| ibm sametime | = 9.0 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 100528 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory