VULNERABILITY INTELLIGENCE
CVE-2016-0321
CVSS score6.2 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2016-07-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor