CVE-2016-0291

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

CVE-2016-0295

Cross-site request forgery CSRF vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363...

CVE-2016-0295

Cross-site request forgery CSRF vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363...

CVE-2016-0295

CVE-2016-0295 affects IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 up to and including 9.5.1, where a Cross-Site Request Forgery (CSRF) vulnerability could allow remote attackers to hijack user sessions and perform requests that insert XSS sequences. Root cause involves CSRF in the platform that en...

CVE-2016-0291

CVE-2016-0291 affects IBM BigFix Platform versions 9.0, 9.1 prior to 9.1.8, and 9.2 prior to 9.2.8. The issue allows remote authenticated users to execute arbitrary OS commands by leveraging the report server access. The root cause is tied to how the report server handles requests, enabling comma...

CVE-2016-0291

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

The vulnerability of the BigFix Platform, a management platform for IT equipment, relates to the use of memory after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the BigFix Platform management platform is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

IBM BigFix Platform BigFix Family WebUI Component Information Disclosure Vulnerability

IBM BigFix platform is IBM's dynamic integrated messaging content-driven and management system for multi-technology platforms. BigFix Family WebUI is one of the Web management interface. A security vulnerability exists in the BigFix Family WebUI component of IBM BigFix Platform 9.2.6 and earlier...

Design/Logic Flaw

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...

CVE-2017-1221

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...

Information disclosure

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle technique...

CVE-2017-1221

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...

CVE-2017-1221

IBM Tivoli Endpoint Manager (IBM BigFix) versions 9.2 and 9.5 have a weakness where the system does not require strong passwords by default, increasing the risk of account compromise. This root cause is described across multiple sources (NVD entry CVE-2017-1221 and related records). Affected comp...

CVE-2017-1229

IBM BigFix / Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) is affected by CVE-2017-1229 due to failure to enable HTTP Strict Transport Security. This causes potential information disclosure via MITM as described by the vulnerability notes in multiple sources. Root cause: HSTS not properly enab...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-33742)

IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.5.4 and earlier and 9.2.9 and earlier, which stems from the program's failure to...

IBM BigFix Platform 9.2.x < 9.2.12 / 9.5.x < 9.5.7 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.2.x prior to 9.2.12, or 9.5.x prior to 9.5.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified cross-site request forgery XSRF vulnerability allows an attacker to...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms. web report compoment is one of the web reporting component. An information disclosure vulnerability exists in the Web Report component of the IBM BigFix Platform...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32855)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.2 and 9.5, which can be exploited by remote attackers to access URLs via server logs, referrer headers, or browser history...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability (CNVD-2017-32864)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform 9.2 and 9.5. The vulnerability arises due to a failure to properly enable the secure cookie attribute. An attacker could exploit the...

IBM BigFix Platform Information Disclosure Vulnerability

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. IBM BigFix Platform 9.2 and 9.5 discloses sensitive information to unauthorized users. An attacker can exploit this vulnerability to obtain sensitive information and conduct further attacks on the system...