CVE-2017-1196

IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 is affected by a weak default password policy (CVE-2017-1196). The issue, documented across multiple sources (NVD/Nessus/CNVD), states that the product does not require strong passwords by default, enabling an attacker to compromise user accounts ...

CVE-2017-1178

CVE-2017-1178 affects IBM Endpoint Manager for Security and Compliance / IBM BigFix Compliance Analytics Web UI (version 1.9.70). The vulnerability is a stored cross-site scripting (XSS) flaw in the Web UI analytics component caused by improper input validation, allowing an unauthenticated remote...

CVE-2017-1179

CVE-2017-1179 affects IBM BigFix Compliance Analytics 1.9.79, where information disclosure occurs due to the use of weaker-than-expected cryptographic algorithms, potentially allowing an attacker to decrypt highly sensitive data. The available connected documents identify the vulnerability class ...

CVE-2017-1197

CVE-2017-1197 affects IBM BigFix Compliance (TEMA SUAv1 SCA SCM). The provided CVE description notes an inadequate account lockout setting that could permit a remote attacker to brute‑force account credentials. The NVD entry shows high severity (CVSS v3: 9.8, CRITICAL) with network access and no ...

CVE-2017-1201

IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) is affected by a vulnerability where the program stores user credentials in clear text, allowing a local attacker to read them. Root cause: credentials stored in clear text within the affected component. Impact: local confidentiality exp...