CVE-2016-3002

IBM Connections versions affected: 4.0–CR4, 4.5–CR5, and 5.0 before CR4. The issue is an information disclosure where physically proximate attackers can obtain sensitive data by reading cached data on a client device. Root cause is implied as caching of sensitive data accessible to local actors; ...