Security Bulletin: Vulnerability in Oracle Java affects Personal Communications

Summary There is a vulnerability in Oracle Java SE. Personal Communications has addressed the applicable CVE-2010-0094. Vulnerability Details CVEID:CVE-2010-0094 DESCRIPTION: Oracle Java SE and Java for Business could allow a remote attacker to execute arbitrary code on the system, caused by...

Security Bulletin: Issue in RCE in PCOMM Service through unprotected named pipe

Summary There is a vulnerability in IBM Personal Communications PCOMM. Personal Communications has addressed the applicable CVE through version update. Vulnerability Details CVEID:CVE-2024-25029 DESCRIPTION: IBM Personal Communications 15.0.1 includes a Windows service that is vulnerable to remot...

Security Bulletin: Control Access issues in PCOMM

Summary There is a vulnerability in IBM Person CommunicationsPCOMM . Person Communications has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-37410 DESCRIPTION: IBM Personal Communications could allow a local user to escalate their privileges to the SYSTEM user due to overly...

Security Bulletin: Security vulnerability in GSKit shipped with IBM PCOMM v12.

Summary GSKit is an IBM component that is used by Personal Communications v12. GSKit that is shipped with Personal Communications contains security vulnerability. Personal Communications has addressed it by packaging a higher version of GSKit that contains the fix. Vulnerability Details CVEID:...

CVE-2016-0321

IBM Personal Communications aka PCOMM 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script...

CVE-2016-0321

IBM PCOMM (IBM Personal Communications) versions 6.0 prior to 6.0.17 and 12.0 prior to 12.0.0.1 are affected by a design flaw that allows a local attacker with access to a victim account to retrieve passwords by running a PowerShell script. The vulnerability occurs when credential extraction is n...