CVE-2016-0321: Infoleak
IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0321?
CVE-2016-0321 is rated as a moderate severity vulnerability due to its potential for credential extraction by local users.
How do I fix CVE-2016-0321?
To fix CVE-2016-0321, it is recommended to upgrade IBM Personal Communications to version 6.0.17 or later, or 12.0.0.1 or later.
What software versions are affected by CVE-2016-0321?
CVE-2016-0321 affects IBM Personal Communications versions 6.x before 6.0.17 and 12.x before 12.0.0.1.
Who can exploit CVE-2016-0321?
Local users with access to the victim account can exploit CVE-2016-0321 by executing a PowerShell script to extract passwords.
What is the impact of CVE-2016-0321?
The impact of CVE-2016-0321 is that it allows an attacker to discover sensitive passwords from the compromised IBM Personal Communications application.