CVSS 3.0
6.2 mediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2016-0321
Medium (6.2) in ibm personal communications. EPSS 0.4% chance of exploitation in the next 30 days.
IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:personal_communications