CVE-2015-4953

概要

参考情報

• www-01.ibm.com/support/docview.wss · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/105197 · VDB Entry
• www-304.ibm.com/support/docview.wss · Patch

bigfix remote control のその他の脆弱性

• CVE-2015-4954中 5.9IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow rem…
• CVE-2017-1233中 6.7IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can…
• CVE-2016-2930高 7.5IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X…
• CVE-2016-2963高 8.8Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authenticati…
• CVE-2016-2952低 3.7IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain s…