CVE-2016-0321

Severity: medium (CVSS 6.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-17 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

Affected products

IBM Personal Communications: 12.0.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4 (+12)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006
http://www-01.ibm.com/support/docview.wss?uid=swg21981692
http://www.securityfocus.com/bid/91751
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006
http://www-01.ibm.com/support/docview.wss?uid=swg21981692
http://www.securityfocus.com/bid/91751

Get alerted when CVE-2016-0321 or the next vulnerability affects your stack