3.7
Faible
CVE-2017-1200 IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a…
Description
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Compliance | 1.9.91 | Pas de correctif indiqué |
| BigFix Compliance | 1.7 | Pas de correctif indiqué |
Autres CVE de BigFix Compliance
Les 4 CVE de BigFix Compliance →
CVE-2017-1198
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters
3.7
Faible
CVE-2017-1177
IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users
5.3
Moyenne
CVE-2017-1202
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection
5.4
Moyenne