Bigfix Remote Control (Ibm) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2018-03-29. Vendor: Ibm.

CVEs of Bigfix Remote Control

• CVE-2015-4953 - CVSS 4.8 (medium), 2018-03-29: IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a…
• CVE-2015-4954 - CVSS 5.9 (medium), 2018-03-27: IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to…
• CVE-2017-1233 - CVSS 6.7 (medium), 2018-01-31: IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be…
• CVE-2016-2930 - CVSS 7.5 (high), 2017-05-03: IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512.
• CVE-2016-2963 - CVSS 8.8 (high), 2016-11-30: Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary…
• CVE-2016-2952 - CVSS 3.7 (low), 2016-11-30: IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive…
• CVE-2016-2951 - CVSS 3.7 (low), 2016-11-30: IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat…
• CVE-2016-2950 - CVSS 6.5 (medium), 2016-11-30: SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified…
• CVE-2016-2949 - CVSS 3.3 (low), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session.
• CVE-2016-2948 - CVSS 7.8 (high), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors.
• CVE-2016-2944 - CVSS 9.8 (critical), 2016-11-30: IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a…
• CVE-2016-2943 - CVSS 1.9 (low), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file.
• CVE-2016-2940 - CVSS 5.3 (medium), 2016-11-30: Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors.
• CVE-2016-2937 - CVSS 6.5 (medium), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request,…
• CVE-2016-2936 - CVSS 7.3 (high), 2016-11-30: IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown…
• CVE-2016-2935 - CVSS 5.3 (medium), 2016-11-30: The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request.
• CVE-2016-2934 - CVSS 6.1 (medium), 2016-11-30: Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2016-2933 - CVSS 6.8 (medium), 2016-11-30: Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted…
• CVE-2016-2932 - CVSS 5.3 (medium), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.
• CVE-2016-2931 - CVSS 5.3 (medium), 2016-11-30: IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network.
• CVE-2016-2929 - CVSS 8.1 (high), 2016-11-25: IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a…
• CVE-2016-2928 - CVSS 4.3 (medium), 2016-11-25: IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs.
• CVE-2016-2927 - CVSS 5.9 (medium), 2016-11-25: IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to…