BR
Product
Bigfix Remote Control
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 13Low 4
Watch
Add Bigfix Remote Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2944 | 9.8 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach Affected: through 9.1.2 |
| CVE-2016-2963 | 8.8 | Nov 30 | Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that… Affected: through 9.1.2 |
| CVE-2016-2929 | 8.1 | Nov 25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach Affected: through 9.1.2 |
| CVE-2016-2948 | 7.8 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors Affected: 9.1.2 |
| CVE-2016-2930 | 7.5 | May 3 | IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication Affected: 9.1.3 |
| CVE-2016-2936 | 7.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors Affected: through 9.1.2 |
| CVE-2016-2933 | 6.8 | Nov 30 | Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request Affected: through 9.1.2 |
| CVE-2017-1233 | 6.7 | Jan 31 | IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System… Affected: 9.1.4 |
| CVE-2016-2950 | 6.5 | Nov 30 | SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors Affected: through 9.1.2 |
| CVE-2016-2937 | 6.5 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted… Affected: through 9.1.2 |
| CVE-2016-2934 | 6.1 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 9.1.2 |
| CVE-2015-4954 | 5.9 | Mar 27 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing… Affected: 9.1.2 |
| CVE-2016-2927 | 5.9 | Nov 25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic… Affected: through 9.1.2 |
| CVE-2016-2940 | 5.3 | Nov 30 | Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors Affected: through 9.1.2 |
| CVE-2016-2935 | 5.3 | Nov 30 | The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request Affected: through 9.1.2 |
| CVE-2016-2932 | 5.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors Affected: through 9.1.2 |
| CVE-2016-2931 | 5.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network Affected: through 9.1.2 |
| CVE-2015-4953 | 4.8 | Mar 29 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a weakness in its… Affected: 9.1.2 |
| CVE-2016-2928 | 4.3 | Nov 25 | IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs Affected: through 9.1.2 |
| CVE-2016-2952 | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use… Affected: through 9.1.2 |
| CVE-2016-2951 | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection… Affected: through 9.1.2 |
| CVE-2016-2949 | 3.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session Affected: through 9.1.2 |
| CVE-2016-2943 | 1.9 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file Affected: through 9.1.2 |
Showing 23