CVE-2017-1226

CVE-2017-1226 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x and 9.5.x. The vulnerability stems from error logging that may include sensitive environmental information, enabling potential attackers to gather details for follow-on actions. Affected component: error messages l...

CVE-2017-1228

The CVE-2017-1228 entry concerns IBM Tivoli Endpoint Manager/IBM BigFix Platform 9.2 and 9.5. The issue is an information-disclosure vulnerability caused by failing to properly enable the secure cookie attribute, enabling an attacker to obtain sensitive data via man-in-the-middle techniques. Impa...

CVE-2017-1521

Summary: CVE-2017-1521 affects IBM BigFix Platform (formerly IBM Tivoli Endpoint Manager) Web UI in 9.2.x prior to 9.2.12 or 9.5.x prior to 9.5.7, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials in a trusted session (cross-site scripting). Aff...

CVE-2017-1230

CVE-2017-1230 affects the IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x and 9.5.x. The root cause is the use of insufficiently random numbers/values in a security context that depends on unpredictable numbers, enabling potential attackers to guess tokens or identifiers and expose s...

CVE-2017-1220

CVE-2017-1220 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2 and 9.5. The connected documents describe an information disclosure vulnerability where sensitive data is exposed to unauthorized users, enabling potential follow-on attacks. The root cause details are not explicitly...

CVE-2017-1222

CVE-2017-1222 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x and 9.5.x. The root cause is a missing authentication check on a critical resource or function, allowing anonymous users to access protected areas. Public sources in the connected documents corroborate this: multip...

CVE-2017-1222

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862...

IBM BigFix Compliance Analytics Information Disclosure Vulnerability

IBM BigFix Compliance Analytics TEMA SUAv1 SCA SCM is a suite of systems management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other functions. A security...

Design/Logic Flaw

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) is affected by a vulnerability where the program stores user credentials in clear text, allowing a local attacker to read them. Root cause: credentials stored in clear text within the affected component. Impact: local confidentiality exp...

The vulnerability of the IBM Tivoli Endpoint Manager automation tool, which is part of the BigFix IT equipment management platform, allows a hacker to trigger an emergency shutdown of the system.

The vulnerability of the IBM Tivoli Endpoint Manager automation tool, a unified management platform for IT equipment, is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to trigger an emergency shutdown of the system resulting in memory resource...

IBM BigFix Remote Control < 9.1.4 Authentication Bypass

The version of IBM BigFix Remote Control running on the remote host is prior to 9.1.4. It is, therefore, affected by an authentication bypass vulnerability that allows a remote attacker to perform administrative actions without requiring authentication. Note that Nessus has not tested for this...

IBM BigFix Platform Tivoli Endpoint Manager Denial of Service Vulnerability

IBM BigFix Platform is a dynamic set of integrated messaging content-driven and management system multi-technology platform from IBM, U.S.A. Tivoli Endpoint Manager is one of the endpoint control software. The software helps users view and update systems, deploy and manage patches to all endpoint...

IBM BigFix Platform 9.1.x < 9.1.1328.0 / 9.2.x < 9.2.11.19 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.1.x prior to 9.1.1328.0 or 9.2.x prior to 9.2.11.19. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds pointer arithmetic error exists in zlib within file...

IBM Tivoli Endpoint Manager Encryption Algorithm Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. A cryptographic algorithm vulnerability exists in Tivoli Endpoint Manager in the IBM BigFix Platform th...

IBM Tivoli Endpoint Manager Open Redirection Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. An open redirection vulnerability exists in Tivoli Endpoint Manager in IBM BigFix Platform. A remote...

IBM Tivoli Endpoint ManagerXML External Entity Injection Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. An XML external entity injection vulnerability exists in Tivoli Endpoint Manager in IBM BigFix Platform...