3.7
Faible
CVE-2017-1198 IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters
Description
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Compliance | 1.9.91 | Pas de correctif indiqué |
| BigFix Compliance | 1.7 | Pas de correctif indiqué |
Autres CVE de BigFix Compliance
Les 4 CVE de BigFix Compliance →
CVE-2017-1177
IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users
5.3
Moyenne
CVE-2017-1200
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a…
3.7
Faible
CVE-2017-1202
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection
5.4
Moyenne