NetSight
IP …
medium6.2

CVE-2016-0321

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users t…

Impact

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

Affected products

VendorProductAffected versions
IbmPersonal Communications
Versions 12.0.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4

Weakness classification

CWE-200

References