CVE-2016-2963

Cross-site request forgery CSRF vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2951

IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...

CVE-2016-2949

IBM BigFix Remote Control prior to version 9.1.3 has an information disclosure flaw that allows a local attacker to obtain sensitive data by reading cached web pages from another user’s session. Some sources cite affected versions as up to 9.1.2 (CNVD) or generally before 9.1.3 (NVD). The root ca...

CVE-2016-2935

CVE-2016-2935 affects IBM BigFix Remote Control broker prior to 9.1.3, where an unauthenticated remote actor can cause a denial-of-service by sending an invalid HTTP request. This is corroborated by multiple sources in the connected documents (NVD/NESSUS/CNVD), which list the affected product and...

CVE-2016-2934

IBM BigFix Remote Control is affected by CVE-2016-2934: an XSS vulnerability in versions before 9.1.3 that allows an unauthenticated attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface. Remediation: upgrade to 9.1.3 or later to mitigate.

Silk TV Remote - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Silk TV Remote published at the 'play' market has multiple vulnerabilities...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11744)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3 that stems from the program's use of a weak default password policy. A remote attacker could exploit the vulnerability t...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11693)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3. A remote attacker could exploit the vulnerability by reading error logs to obtain sensitive information...

IBM BigFix Remote Control Information Disclosure Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3, which stems from the program's failure to properly restrict the set of available encryption algorithms. A remote attack...

HCL / IBM BigFix Remote Control Detection (HTTP)

HTTP based detection of HCL / IBM BigFix Remote Control. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

IBM BigFix Remote Control < 9.1.3 Multiple Vulnerabilities

IBM BigFix Remote Control is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

CVE-2016-2929

IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2016-2929

IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2016-2928

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

CVE-2016-2928

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

CVE-2016-2927

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...

CVE-2016-2927

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...

Default credentials

IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...

Design/Logic Flaw

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

Design/Logic Flaw

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...