What is CVE-2016-2974?

CVE-2016-2974 is a low-severity vulnerability in Ibm Sametime, classified under Information Disclosure. CVSS score: 3.3/10. Published 2017-08-29.

How severe is CVE-2016-2974?

Low severity. CVSS v3 base score is 3.3 out of 10.

Information disclosure in Ibm Sametime

CVE-2016-2974

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

Vulnerability class: Information Disclosure

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Ibm Sametime — versions 8.5.2, 9.0.0.0, 9.0.1

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@us.ibm.com (VDB Entry, x_refsource_MISC, Vendor Advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-2974?: CVE-2016-2974 is a low-severity vulnerability in Ibm Sametime, classified under Information Disclosure. CVSS score: 3.3/10. Published 2017-08-29.
How severe is CVE-2016-2974?: Low severity. CVSS v3 base score is 3.3 out of 10.