IBM Bigfix Security Compliance Analytics
5 CVEs affecting IBM Bigfix Security Compliance Analytics. Latest disclosed: 2017-10-05. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1197 | Critical | 9.8 | 2017-06-15 | IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IB… |
CVE-2017-1196 | Critical | 9.8 | 2017-06-07 | IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to c… |
CVE-2017-1201 | High | 7.8 | 2017-10-05 | IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676. |
CVE-2017-1178 | Medium | 6.1 | 2017-06-07 | IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… |
CVE-2017-1179 | Medium | 5.9 | 2017-06-08 | IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information… |