IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32854)

IBM BigFix Platform is a dynamic integrated messaging content-driven and management system multi-technology platform from IBM, USA.BigFix Server compoment is one of the BigFix server components. An information disclosure vulnerability exists in the BigFix Server component of the IBM BigFix Platfo...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms. web report compoment is one of the web reporting component. An information disclosure vulnerability exists in the Web Report component of the IBM BigFix Platform...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32855)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.2 and 9.5, which can be exploited by remote attackers to access URLs via server logs, referrer headers, or browser history...

IBM BigFix Platform Cross-Site Scripting Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms.Web Report compoment is one of the Web reporting component. A cross-site scripting vulnerability exists in the Web Report component in IBM BigFix Platform version...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability (CNVD-2017-32864)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform 9.2 and 9.5. The vulnerability arises due to a failure to properly enable the secure cookie attribute. An attacker could exploit the...

IBM BigFix Platform Information Disclosure Vulnerability

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. IBM BigFix Platform 9.2 and 9.5 discloses sensitive information to unauthorized users. An attacker can exploit this vulnerability to obtain sensitive information and conduct further attacks on the system...

IBM BigFix Platform Elevation of Privilege Vulnerability

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. IBM BigFix Platform 9.2 and 9.5 does not perform authentication checks on critical resources or functions, which could be exploited by a remote attacker to gain access to protected areas by an anonymous user...

CVE-2017-1521

IBM Tivoli Endpoint Manager for Lifecycle/Power/Patch Platform and Applications IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

CVE-2017-1222

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862...

Code injection

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911...

CVE-2017-1226

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905...

CVE-2017-1220

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860...

CVE-2017-1232

CVE-2017-1232 affects IBM BigFix Platform (formerly IBM Tivoli Endpoint Manager) 9.2.x before 9.2.12 and 9.5.x before 9.5.7. The vulnerability is information disclosure due to transmitting sensitive data in plaintext over a sniffable network channel. Impact is partial confidentiality loss; no int...

CVE-2017-1226

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905...

CVE-2017-1226

CVE-2017-1226 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x and 9.5.x. The vulnerability stems from error logging that may include sensitive environmental information, enabling potential attackers to gather details for follow-on actions. Affected component: error messages l...

CVE-2017-1230

CVE-2017-1230 affects the IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x and 9.5.x. The root cause is the use of insufficiently random numbers/values in a security context that depends on unpredictable numbers, enabling potential attackers to guess tokens or identifiers and expose s...

CVE-2017-1521

Summary: CVE-2017-1521 affects IBM BigFix Platform (formerly IBM Tivoli Endpoint Manager) Web UI in 9.2.x prior to 9.2.12 or 9.5.x prior to 9.5.7, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials in a trusted session (cross-site scripting). Aff...

CVE-2017-1521

IBM Tivoli Endpoint Manager for Lifecycle/Power/Patch Platform and Applications IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

CVE-2017-1220

CVE-2017-1220 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2 and 9.5. The connected documents describe an information disclosure vulnerability where sensitive data is exposed to unauthorized users, enabling potential follow-on attacks. The root cause details are not explicitly...

IBM BigFix Platform Tivoli Endpoint Manager Denial of Service Vulnerability

IBM BigFix Platform is a dynamic set of integrated messaging content-driven and management system multi-technology platform from IBM, U.S.A. Tivoli Endpoint Manager is one of the endpoint control software. The software helps users view and update systems, deploy and manage patches to all endpoint...