CVE-2016-8977

Mô tả

Tham khảo

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/95308 · Third Party Advisory

Lỗ hổng khác của bigfix inventory

• CVE-2016-8964NGHIÊM TRỌNG 9.8IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials…
• CVE-2016-8962TRUNG BÌNH 5.9IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to comprom…
• CVE-2016-8963TRUNG BÌNH 5.5IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.
• CVE-2016-8967TRUNG BÌNH 5.5IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.
• CVE-2016-8981TRUNG BÌNH 5.5IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.