PT-2014-3924
CVE-2014-0890
·
تاريخ النشر
2014-03-06
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
1.9
منخفضةالمقاييسAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sametime versions 8.5.1 through 9.0.0.1
Description
The issue allows local users to obtain sensitive information by reading a log file, specifically cleartext passwords, during Audio/Video chat sessions when a certain
com.ibm.collaboration.realtime.telephony.*.level setting is used.Recommendations
For IBM Sametime versions 8.5.1 through 9.0.0.1, consider disabling the logging feature for Audio/Video chat sessions or adjust the
com.ibm.collaboration.realtime.telephony.*.level setting to prevent cleartext password logging until a fix is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾