CVE-2016-2971: Infoleak
Published Aug 29, 2017
·Updated
IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Force ID: 113898.
Affected Software
5 affected components
IBM Sametime=8.5.2.0
IBM Sametime=8.5.2.1
IBM Sametime=9.0.0.0
IBM Sametime=9.0.0.1
IBM Sametime=9.0.1
Event History
Aug 29, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-2971?
CVE-2016-2971 is considered a medium severity vulnerability due to its potential to disclose sensitive information.
2
How do I fix CVE-2016-2971?
To fix CVE-2016-2971, ensure that you apply the latest patches provided by IBM for affected versions of Sametime.
3
Which versions of IBM Sametime are affected by CVE-2016-2971?
CVE-2016-2971 affects IBM Sametime versions 8.5.2.0, 8.5.2.1, 9.0.0.0, 9.0.0.1, and 9.0.1.
4
What type of information is disclosed in CVE-2016-2971?
CVE-2016-2971 can disclose sensitive information contained in stack trace error logs.
5
Can CVE-2016-2971 lead to further attacks?
Yes, the information disclosed by CVE-2016-2971 could potentially aid attackers in conducting future attacks.