Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-2978: IBM Sametime may expose cached browser data to local user

CVE-2016-2978 · published 9 years ago

Summary

IBM Sametime versions 8.5.2 and 9.0 can save information from a web browser's cache on the computer. A person with access to that computer could view that data, which might include private details. Apply the latest software updates from IBM and regularly clear the browser cache on devices that run Sametime.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ibm	sametime	8.5.2.0 8.5.2.1 9.0.0.0 9.0.0.1 9.0.1 `cpe:2.3:a:ibm:sametime:8.5.2.0:::::::*`

Original advisory text

IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938.

References

http://www.ibm.com/support/docview.wss?uid=swg22006441 Patch Vendor Advisory
http://www.securityfocus.com/bid/100572
https://exchange.xforce.ibmcloud.com/vulnerabilities/113938 VDB Entry Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

3.3 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-200Information Exposure

Timeline

Published29 Aug 2017

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2016-2978 · NVD

Track software like this

Free during beta