Vulnerabilities > CVE-2016-2972 - Credentials Management vulnerability in IBM Sametime

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
ibm
CWE-255

Summary

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855.

Vulnerable Configurations

Part Description Count
Application
Ibm
5

Common Weakness Enumeration (CWE)