CVEvulnerability
CVE-2016-2951
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2016-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.7 LOW — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.
Affected configurations
• ibm bigfix remote control (<= 9.1.2)
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21991885 Vendor Advisory
- http://www.securityfocus.com/bid/94601 www.securityfocus.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21991885 Vendor Advisory
- http://www.securityfocus.com/bid/94601 www.securityfocus.com