Vulnerabilities > IBM > Bigfix Remote Control > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2016-11-30 | CVE-2016-2943 | Information Exposure Through Log Files vulnerability in IBM Bigfix Remote Control 9.1.2 IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file. | 1.9 |
2016-11-30 | CVE-2016-2949 | Information Exposure vulnerability in IBM Bigfix Remote Control 9.1.2 IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session. | 3.3 |
2016-11-30 | CVE-2016-2951 | Cryptographic Issues vulnerability in IBM Bigfix Remote Control 9.1.2 IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data. | 3.7 |
2016-11-30 | CVE-2016-2952 | Information Exposure vulnerability in IBM Bigfix Remote Control 9.1.2 IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP. | 3.7 |