PT-2017-9913

Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM BigFix Inventory version 9, consider implementing access controls to...

PT-2017-9902

Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue concerns the storage of potentially sensitive information in log files by IBM BigFix Inventory. This information could be accessed by a local user, potentially leading to unauthorized...

PT-2017-9911

Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue could disclose sensitive information to an unauthorized user using HTTP GET requests, potentially allowing for further attacks against the system. Recommendations For IBM BigFix Inventory...

CVE-2016-8980: Improper Restriction of XML External Entity Reference

IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-8966: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-8961: URL Redirection to Untrusted Site

IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site...

CVE-2016-8967: Undefined Security Weakness

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-8981: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-8977: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system...

CVE-2016-8963: Exposure of Sensitive Information to an Unauthorized Actor

IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user...

MC Inventory Manager Script - Multiple Vulnerabilities

MC Inventory Manager Script - Multiple Vulnerabilities Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web...

MC Inventory Manager SQL Injection

Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

MC Inventory Manager Script - Multiple Vulnerabilities

Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet Admi...

corvettecapital.com XSS vulnerability

Vulnerable URL: http://www.corvettecapital.com/inventory?bodytype=SUV=Passenger' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00327)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM BigFix Inventory Local Information Disclosure Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00066)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory XML External Entity Injection Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Open Redirect Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...