Design/Logic Flaw

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 TEMA SUAv1 SCA SCM stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) is affected by a vulnerability where the program stores user credentials in clear text, allowing a local attacker to read them. Root cause: credentials stored in clear text within the affected component. Impact: local confidentiality exp...

The vulnerability of the IBM Tivoli Endpoint Manager automation tool, which is part of the BigFix IT equipment management platform, allows a hacker to trigger an emergency shutdown of the system.

The vulnerability of the IBM Tivoli Endpoint Manager automation tool, a unified management platform for IT equipment, is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to trigger an emergency shutdown of the system resulting in memory resource...

IBM BigFix Remote Control < 9.1.4 Authentication Bypass

The version of IBM BigFix Remote Control running on the remote host is prior to 9.1.4. It is, therefore, affected by an authentication bypass vulnerability that allows a remote attacker to perform administrative actions without requiring authentication. Note that Nessus has not tested for this...

IBM BigFix Platform Tivoli Endpoint Manager Denial of Service Vulnerability

IBM BigFix Platform is a dynamic set of integrated messaging content-driven and management system multi-technology platform from IBM, U.S.A. Tivoli Endpoint Manager is one of the endpoint control software. The software helps users view and update systems, deploy and manage patches to all endpoint...

IBM BigFix Platform 9.1.x < 9.1.1328.0 / 9.2.x < 9.2.11.19 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.1.x prior to 9.1.1328.0 or 9.2.x prior to 9.2.11.19. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds pointer arithmetic error exists in zlib within file...

IBM Tivoli Endpoint Manager Open Redirection Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. An open redirection vulnerability exists in Tivoli Endpoint Manager in IBM BigFix Platform. A remote...

IBM Tivoli Endpoint Manager Encryption Algorithm Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. A cryptographic algorithm vulnerability exists in Tivoli Endpoint Manager in the IBM BigFix Platform th...

IBM Tivoli Endpoint ManagerXML External Entity Injection Vulnerability

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. An XML external entity injection vulnerability exists in Tivoli Endpoint Manager in IBM BigFix Platform...

IBM Tivoli Endpoint Manager Cross-Site Scripting Vulnerability (CNVD-2017-21771)

IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A cross-site scripting vulnerability exists in IBM BigFix Platform. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the Web ...

IBM Tivoli Endpoint Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-21770)

IBM BigFix Platform is IBM's dynamic multi-technology platform that integrates message content drivers and management systems, of which Tivoli Endpoint Manager is the endpoint control software. A cross-site request forgery vulnerability exists in Tivoli Endpoint Manager in IBM BigFix Platform. A...

Multiple IBM products strongly certified to bypass vulnerabilities

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

CVE-2016-8964

IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853...

CVE-2016-8964

IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853...

Code injection

IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853...

CVE-2016-8964

IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853...

CVE-2016-8964

CVE-2016-8964 affects IBM BigFix Inventory v9.x (and IBM License Metric Tool v9.x) where an inadequate account lockout setting permits a remote attacker to brute‑force credentials. The IBM Security Bulletin confirms the vulnerability in BigFix Inventory v9.x and LMT v9.x, with a fixed version in ...

IBM BigFix Compliance Analytics Security Bypass Vulnerability

IBM BigFix Security Compliance Analytics is a suite of systems management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other functions. A security bypass...