CVE-2016-0358: Infoleak
Published Aug 29, 2017
·Updated
IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928.
Affected Software
5 affected components
IBM Sametime=8.5.2.0
IBM Sametime=8.5.2.1
IBM Sametime=9.0.0.0
IBM Sametime=9.0.0.1
IBM Sametime=9.0.1
Remediation
Patch Available
Event History
Aug 29, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-0358?
CVE-2016-0358 has a medium severity rating due to the risk of unauthorized access to group chat meetings.
2
How do I fix CVE-2016-0358?
To fix CVE-2016-0358, upgrade IBM Sametime to versions 9.0.1 or later, or to 8.5.2.1 or later.
3
What type of attack does CVE-2016-0358 facilitate?
CVE-2016-0358 facilitates an attack where an unauthorized authenticated user can gain access to meetings they were not invited to.
4
Which versions of IBM Sametime are affected by CVE-2016-0358?
IBM Sametime versions 8.5.2.0, 8.5.2.1, 9.0.0.0, 9.0.0.1, and 9.0.1 are affected by CVE-2016-0358.
5
Can CVE-2016-0358 be exploited without any user interaction?
CVE-2016-0358 can potentially be exploited by an attacker who is already authenticated, without needing further user interaction.