2500 matches found
CVE-2016-2951
CVE-2016-2951 affects IBM BigFix Remote Control prior to 9.1.3. The issue stems from not properly setting the default encryption strength, allowing remote attackers to defeat cryptographic protections by sniffing the network and performing calculations on encrypted data. Affected version: before ...
CVE-2016-2944
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
CVE-2016-2950
SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-2933
Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request...
CVE-2016-2936
IBM BigFix Remote Control (before 9.1.3) stores passwords in clear text, enabling local users to obtain sensitive credentials. Affected versions include 9.1.2 and earlier. Root cause: cleartext password storage. Impact: information disclosure to local attackers. Remediation: upgrade to version 9....
CVE-2016-2936
IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors...
CVE-2016-2940
Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors...
CVE-2016-2935
CVE-2016-2935 affects IBM BigFix Remote Control broker prior to 9.1.3, where an unauthenticated remote actor can cause a denial-of-service by sending an invalid HTTP request. This is corroborated by multiple sources in the connected documents (NVD/NESSUS/CNVD), which list the affected product and...
CVE-2016-2931
IBM BigFix Remote Control is affected by CVE-2016-2931: versions before 9.1.3 allow unauthenticated remote attackers to obtain sensitive cleartext information by sniffing network traffic. Affected product: IBM BigFix Remote Control prior to 9.1.3. Root cause: information disclosure through networ...
CVE-2016-2937
IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...
CVE-2016-2952
IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP...
CVE-2016-2937
IBM BigFix Remote Control vulnerability (CVE-2016-2937) affects IBM BigFix Remote Control prior to 9.1.3. The issue allows remote attackers to obtain sensitive information or spoof email transmission by sending a crafted POST request, described as an “untrusted information vulnerability.” Affecte...
CVE-2016-2963
IBM BigFix Remote Control is affected by a CSRF vulnerability (CVE-2016-2963) affecting versions up to 9.1.3 (earlier listings also cite 9.1.2 and older). The issue allows an attacker to hijack the authenticated user’s session by issuing requests that insert XSS sequences, enabling cross-site req...
CVE-2016-2943
IBM BigFix Remote Control before 9.1.3 is affected by CVE-2016-2943: a local information-disclosure vulnerability where an attacker can read a log file to obtain sensitive information due to unspecified privileges. The issue is documented across multiple sources (NVD entry for CVE-2016-2943 and N...
CVE-2016-2943
IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file...
CVE-2016-2935
The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request...
CVE-2016-2951
IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...
CVE-2016-2934
IBM BigFix Remote Control is affected by CVE-2016-2934: an XSS vulnerability in versions before 9.1.3 that allows an unauthenticated attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface. Remediation: upgrade to 9.1.3 or later to mitigate.
CVE-2016-2940
IBM BigFix Remote Control is affected by an information-disclosure vulnerability (CVE-2016-2940) present in 9.1.2 and earlier versions, with impact described as a remote attacker obtaining sensitive information. The connected CNVD entry explicitly notes the affected versions (9.1.2 and earlier) a...