CVE-2016-8977

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2017-02-01

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Bigfix Inventory (Ibm)
• License Metric Tool (Ibm)
• Bigfix Inventory (Ibm Corporation)

References

• http://www.ibm.com/support/docview.wss?uid=swg21995014
• http://www.securityfocus.com/bid/95308