Not rated
CVE-2016-8966 IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
Description
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Inventory | 9.2 | No fix stated |
Other CVEs of BigFix Inventory
The 8 CVEs of BigFix Inventory →
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier…
Not rated
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user
Not rated
CVE-2016-8977
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests
Not rated
CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user
Not rated