BR
Product
Bigfix Remote Control
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 13Low 4
Watch
Add Bigfix Remote Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2963 | 8.8 | Nov 30 | Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that… Affected: through 9.1.2 |
| CVE-2016-2929 | 8.1 | Nov 25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach Affected: through 9.1.2 |
| CVE-2016-2948 | 7.8 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors Affected: 9.1.2 |
| CVE-2016-2930 | 7.5 | May 3 | IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication Affected: 9.1.3 |
| CVE-2016-2936 | 7.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors Affected: through 9.1.2 |
Showing 5
