Unscored CVE-2016-0321 EUVD-2016-0356GHSA-g2f4-fx9f-49rr

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which …

Published Jul 17, 2016 · Updated Aug 5, 2024 · Assigned by ibm

Description

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

Advisories 1

WID-SEC-2023-2596 IBM Personal Communications: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 23, 2023

References

http://www-01.ibm.com/support/docview.wss?uid=swg21981692
91751 vdb-entry
IT12006 vendor-advisory