CVE-2016-2931

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network...

CVE-2016-2948

IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors...

CVE-2016-2948

IBM BigFix Remote Control (before 9.1.3) is affected by CVE-2016-2948: a local information-disclosure vulnerability where hardcoded credentials can be discovered by a local attacker via unspecified vectors. Affected version range includes 9.1.2 and earlier; impact is local confidentiality and int...

CVE-2016-2963

Cross-site request forgery CSRF vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2934

Cross-site scripting XSS vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2952

IBM BigFix Remote Control is affected by CVE-2016-2952. Versions before 9.1.3 do not enable HSTS, enabling information disclosure via HTTP and allowing remote attackers to obtain sensitive data. The CNVD/NVD entries corroborate an information‑disclosure impact due to missing HSTS. Root cause: HST...

CVE-2016-2940

Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors...

CVE-2016-2952

IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP...

PT-2016-5286

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue allows remote attackers to cause a denial of service via an invalid HTTP request. Recommendations For versions prior to 9.1.3, update to version 9.1.3 or later to resolve...

CVE-2016-2949: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session...

PT-2016-5297

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data, due to the defaul...

PT-2016-5288

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an untrusted information vulnerability...

CVE-2016-2931: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network...

PT-2016-5287

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue concerns the storage of unspecified passwords in cleartext, allowing local users to obtain sensitive information. Recommendations For versions prior to 9.1.3, update to...

PT-2016-5284

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description A directory traversal issue allows remote authenticated administrators to read arbitrary files by sending a crafted request. Recommendations For versions prior to 9.1.3, update to...

CVE-2016-2943: Insertion of Sensitive Information into Log File

IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file...

CVE-2016-2951: Undefined Security Weakness

IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...

CVE-2016-2932: XML Injection (aka Blind XPath Injection)

IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors...

PT-2016-5307

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recommendations For versions...

PT-2016-5290

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file. Recommendations For versions prior to 9.1.3, update to version...