CVE-2016-2971

CWE-200 — Information Exposure6 documents5 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 52.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sametime
Timeline
PublishedAug 29
Latest updateMay 17

Description

IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Force ID: 113898.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/sametime5 versions+4
▶NVDibm/sametime5 versions+4

🔴Vulnerability Details

3
GHSA
GHSA-q8jr-cpqv-gjrw: IBM Sametime Media Services 8↗2022-05-17
▶
CVEList
CVE-2016-2971: IBM Sametime Media Services 8↗2017-08-29
▶
OSV
linux-lts-wily vulnerabilities↗2016-05-09
▶

🕵️Threat Intelligence

2
Talos
Vulnerability Spotlight: Adobe Acrobat Reader DC jpeg Decoder Vulnerability↗2017-01-20
▶
Talos
Vulnerability Spotlight: Adobe Acrobat Reader DC jpeg Decoder Vulnerability↗2017-01-20
▶
CVE-2016-2971 (MEDIUM CVSS 5.3) | IBM Sametime Media Services 8.5.2 a | cvebase.io