CVE-2015-4954

概要

参考情報

• www-01.ibm.com/support/docview.wss · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/105200 · VDB Entry

bigfix remote control のその他の脆弱性

• CVE-2015-4953中 4.8IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffi…
• CVE-2017-1233中 6.7IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can…
• CVE-2016-2930高 7.5IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X…
• CVE-2016-2963高 8.8Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authenticati…
• CVE-2016-2952低 3.7IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain s…