CVE-2016-2976: IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensit...

Security readout for executives and security teams

A legitimate IBM Sametime meeting invitee could see sensitive information that had been cleared from a meeting by viewing report history. The main risk is unintended disclosure to people who were invited, not necessarily anonymous outsiders. Exposure is likely limited to organizations still running the listed IBM Sametime Meeting Server versions and using meeting report history. The attacker role described is a meeting invitee with access to a meeting context. Treat this as a moderate confidentiality issue if legacy Sametime remains in use. Priority rises where meetings contained regulated, customer, legal, or executive-sensitive information. Mitigation focus: Confirm whether IBM Sametime Meeting Server is still deployed.; Identify any instances running the listed affected versions.; Review IBM advisory swg22006441 for vendor-approved fixes or workarounds..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.