Ibm Bigfix Remote Control
23 CVEs affecting Ibm Bigfix Remote Control. Latest disclosed: 2018-03-29. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-2944 | Critical | 9.8 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brut… |
CVE-2016-2963 | High | 8.8 | 2016-11-30 | Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary use… |
CVE-2016-2929 | High | 8.1 | 2016-11-25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-for… |
CVE-2016-2948 | High | 7.8 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors. |
CVE-2016-2930 | High | 7.5 | 2017-05-03 | IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512. |
CVE-2016-2936 | High | 7.3 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown v… |
CVE-2016-2933 | Medium | 6.8 | 2016-11-30 | Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted re… |
CVE-2017-1233 | Medium | 6.7 | 2018-01-31 | IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be execut… |
CVE-2016-2950 | Medium | 6.5 | 2016-11-30 | SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vecto… |
CVE-2016-2937 | Medium | 6.5 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related… |
CVE-2016-2934 | Medium | 6.1 | 2016-11-30 | Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecifi… |
CVE-2015-4954 | Medium | 5.9 | 2018-03-27 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to co… |
CVE-2016-2927 | Medium | 5.9 | 2016-11-25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to def… |
CVE-2016-2940 | Medium | 5.3 | 2016-11-30 | Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors. |
CVE-2016-2935 | Medium | 5.3 | 2016-11-30 | The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request. |
CVE-2016-2932 | Medium | 5.3 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors. |
CVE-2016-2931 | Medium | 5.3 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network. |
CVE-2015-4953 | Medium | 4.8 | 2018-03-29 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a w… |
CVE-2016-2928 | Medium | 4.3 | 2016-11-25 | IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs. |
CVE-2016-2952 | Low | 3.7 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive informatio… |