Not rated
CVE-2016-8962 IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier…
Description
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Inventory | Versions not published |
Other CVEs of BigFix Inventory
The 8 CVEs of BigFix Inventory →
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user
Not rated
CVE-2016-8977
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests
Not rated
CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user
Not rated
CVE-2016-8961
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Not rated