CVEvulnerability
CVE-2016-8977
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.
Affected configurations
• ibm license metric tool 9.2.0
• ibm bigfix inventory 9.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg21995014 Vendor Advisory
- http://www.securityfocus.com/bid/95308 Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg21995014 Vendor Advisory
- http://www.securityfocus.com/bid/95308 Third Party Advisory, VDB Entry