CVE-2016-0397

MEDIUM 5.9CVE-2016-0397 · Published 30/08/2016 · updated 17/06/2026

In short

CVE-2016-0397 is a MEDIUM (CVSS 5.9) vulnerability affecting bigfix webreports (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bigfix webreports ibm	`= 9.0= 9.1= 9.2= 9.5`	No fix yet

Description

WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.

References

www-01.ibm.com/support/docview.wss · Mitigation
securityfocus.com/bid/92467

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free