CVE-2016-8964

Description

References

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/99548 · Third Party Advisory
• securitytracker.com/id/1038919 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/118853 · VDB Entry

bigfix inventory의 다른 취약점

• CVE-2016-8962보통 5.9IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to comprom…
• CVE-2016-8977보통 5.3IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used…
• CVE-2016-8963보통 5.5IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.
• CVE-2016-8967보통 5.5IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.
• CVE-2016-8981보통 5.5IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.