1484 matches found
CVE-2016-2930
IBM BigFix Remote Control 9.1.3 is affected by an authentication bypass vulnerability (CVE-2016-2930) that allows a remote attacker to perform actions reserved for an administrator without authentication. Connected sources also reference a fixed version 9.1.4 as the remediation path. Affected com...
CVE-2016-2930
IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512...
IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
Design/Logic Flaw
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
CVE-2016-8962
CVE-2016-8962 affects IBM BigFix Inventory v9.x and IBM License Metric Tool v9.x. Root cause: the password strength policy is not enforced by default, making it easier for attackers to compromise user accounts. The IBM bulletin confirms the vulnerability in both products and provides a remediatio...
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
IBM BigFix Inventory and License Metric Tool Information Disclosure Vulnerability
IBM BigFix Inventory and License Metric Tool are both products of IBM USA. The former is a set of software for endpoint security review and mitigation applied to information security management, and the latter is a set of free tools applied to IT service management used to help determine processo...
CVE-2016-8977
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system...
CVE-2016-8977
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system...
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user...
Design/Logic Flaw
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user...
Information disclosure
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system...
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user...
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user...
CVE-2016-8977
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system...
CVE-2016-8963
IBM BigFix Inventory v9 and IBM License Metric Tool v9 are affected by CVE-2016-8963 due to sensitive information being stored in server log files that could be read by a local user. The IBM Security Bulletin confirms the vulnerability in the server-side logging and provides remediation: upgrade ...
CVE-2016-8977
CVE-2016-8977 affects IBM License Metric Tool v9 and IBM BigFix Inventory v9. The IBM Security Bulletin confirms that HTTP GET requests could disclose sensitive information to an unauthorized user, enabling information disclosure that could support further attacks. Affected products include IBM B...