EUVD-2017-10212

Malware in sbrugna...

EUVD-2017-10216

Malware in sbrugna...

EUVD-2017-10213

Malware in sbrugna...

EUVD-2017-10218

Malware in sbrugna...

EUVD-2017-10193

Malware in sbrugna...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1202

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677...

Code injection

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...

CVE-2017-1202

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1202

CVE-2017-1202 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The vulnerability is HTML injection that could allow a remote attacker to inject HTML code, which would execute in the victim’s browser within the hosting site’s security context when viewed. No exploitation details or p...

CVE-2017-1177: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429...

PT-2019-7903

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance versions 1.7 through 1.9.91 Description The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. Recommendations For versions 1.7 through 1.9.91, update to...

CVE-2017-1202: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677...

PT-2019-7905

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance versions 1.7 through 1.9.91 Description The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle MITM attack. This could result in the software connecting to a malicious host while...

CVE-2017-1200: Improper Certificate Validation

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...

PT-2019-7906

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance versions 1.7 through 1.9.91 Description The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

PT-2019-7904

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance versions 1.7 through 1.9.91 Description The issue concerns the storage of sensitive information in URL parameters, which could lead to information disclosure if unauthorized parties gain access to the URLs through server...

CVE-2017-1198: Insertion of Sensitive Information into Log File

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1201: Insufficiently Protected Credentials

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...