Not rated
CVE-2016-8977 IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests
Description
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Inventory | 9.2 | No fix stated |
Other CVEs of BigFix Inventory
The 8 CVEs of BigFix Inventory →
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier…
Not rated
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user
Not rated
CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user
Not rated
CVE-2016-8961
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Not rated