Non notée
CVE-2016-8977 IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests
Description
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Inventory | 9.2 | Pas de correctif indiqué |
Autres CVE de BigFix Inventory
Les 8 CVE de BigFix Inventory →
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier…
Non notée
CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user
Non notée
CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user
Non notée
CVE-2016-8961
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Non notée