CVE-2016-0321

Published: Jul 17, 2016Modified: May 6, 2026

6.2

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

Affected (18)

Products: Ibm: Personal Communications

Ibm

1 product

Personal Communications

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Personal Communications	Version 12.0.0

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Personal Communications	Version 6.0.0
Ibm Personal Communications	Version 6.0.10
Ibm Personal Communications	Version 6.0.11
Ibm Personal Communications	Version 6.0.12
Ibm Personal Communications	Version 6.0.13
Ibm Personal Communications	Version 6.0.14
Ibm Personal Communications	Version 6.0.15
Ibm Personal Communications	Version 6.0.16
Ibm Personal Communications	Version 6.0.1
Ibm Personal Communications	Version 6.0.2
Ibm Personal Communications	Version 6.0.3
Ibm Personal Communications	Version 6.0.4
Ibm Personal Communications	Version 6.0.5
Ibm Personal Communications	Version 6.0.6
Ibm Personal Communications	Version 6.0.7
Ibm Personal Communications	Version 6.0.8
Ibm Personal Communications	Version 6.0.9