5.3
Medium
CVE-2017-1177 IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users
Description
IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Compliance | 1.9.91 | No fix stated |
| BigFix Compliance | 1.7 | No fix stated |
Other CVEs of BigFix Compliance
The 4 CVEs of BigFix Compliance →
CVE-2017-1198
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters
3.7
Low
CVE-2017-1200
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a…
3.7
Low
CVE-2017-1202
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection
5.4
Medium