CVE-2016-0321: IBM Personal Communications

Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

Affected products

• IBM Personal Communications: version 12.0.0 only; version 6.0.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; …

Published 2016-07-17. Last modified 2026-06-17.