CVE-2014-0890

Published: Mar 6, 2014Modified: May 6, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony.*.level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by reading a log file.

Affected (7)

Products: Ibm: Sametime

Ibm

1 product

Sametime

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Sametime	Version 8.5.1.0
Ibm Sametime	Version 8.5.1.1
Ibm Sametime	Version 8.5.1.2
Ibm Sametime	Version 8.5.2.0
Ibm Sametime	Version 8.5.2.1
Ibm Sametime	Version 9.0.0.0
Ibm Sametime	Version 9.0.0.1

Related CWEs

CWE-255

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21665658

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/91282

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21665658

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/91282

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.