CVE-2016-2972

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
VendorProductVersion
ibmsametime
8.5.2.0
ibmsametime
8.5.2.1
ibmsametime
9.0.0.0
ibmsametime
9.0.0.1
ibmsametime
9.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg22006439
http://www.securityfocus.com/bid/100599
http://www.securitytracker.com/id/1039231
https://exchange.xforce.ibmcloud.com/vulnerabilities/113855
http://www.ibm.com/support/docview.wss?uid=swg22006439
http://www.securityfocus.com/bid/100599
http://www.securitytracker.com/id/1039231
https://exchange.xforce.ibmcloud.com/vulnerabilities/113855