Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123670
CVE ID: CVE-2017-1196 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T13:25:17.447Z Vendors: IBM Products: Endpoint Manager for Security and Compliance Problem Types: Obtain Information Description: IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004168 - http://www.securityfocus.com/bid/98911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123671
CVE ID: CVE-2017-1197 State: PUBLISHED Published: 2017-06-15T13:00:00 Last Updated: 2024-08-05T13:25:17.529Z Vendors: IBM Products: BigFix Compliance Analytics Problem Types: Obtain Information Description: IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123672
CVE ID: CVE-2017-1198 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T16:58:22.072Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Compliance Problem Types: Obtain Information Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exchange.
s: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123673
CVE ID: CVE-2017-1199 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-16T17:43:09.117Z Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Cross-Site Scripting Description: IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123674 - http://www.secur
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123674 - http://www.securityfocus.com/bid/100129 - http://www.ibm.com/support/docview.wss?uid=swg22006618
CVE ID: CVE-2017-1200 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T17:03:29.068Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Compliance Problem Types: Obtain Information Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted h
a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123675
CVE ID: CVE-2017-1201 State: PUBLISHED Published: 2017-10-05T17:00:00Z Last Updated: 2024-09-17T02:37:19.255Z Vendors: IBM Products: BigFix Compliance Analytics Problem Types: Obtain Information Description: IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123676
CVE ID: CVE-2017-1202 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-17T01:46:55.527Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Compliance Problem Types: Gain Access Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exc
t Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123677
CVE ID: CVE-2017-1203 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-17T01:55:37.645Z Vendors: IBM Products: BigFix family Problem Types: Cross-Site Scripting Description: IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123678 - http://www.securityfocus.com/bid/99916
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123678 - http://www.securityfocus.com/bid/99916 - http://www.ibm.com/support/docview.wss?uid=swg22006014 - http://www.ibm.com/support/docview.wss?uid=swg22005246
CVE ID: CVE-2017-1204 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-17T03:23:42.463Z Vendors: IBM Products: Tealeaf Customer Experience Problem Types: Gain Access Description: IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123740 - http://www.ibm.com/support/docview.wss?uid=swg22006455 - http://www.ibm.com/support/docview.wss?uid=swg22006392
CVE ID: CVE-2017-1205 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-05T13:25:17.466Z Vendors: IBM Corporation Products: Spectrum LSF Problem Types: Gain Privileges Description: IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg3T1025091 - http://www.securityfocus.com/bid/97528
CVE ID: CVE-2017-1207 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-17T03:22:49.603Z Vendors: IBM Products: Integration Bus Problem Types: Obtain Information Description: IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123777 - http://www.ibm.com/support/docview.wss?uid=swg22005382 - http://www.securityfocus.com/bid/99368
CVE ID: CVE-2017-1208 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-16T23:20:20.550Z Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123778. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123778 - http://www.ibm.com/supp
/www.securityfocus.com/bid/99367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123778 - http://www.ibm.com/support/docview.wss?uid=swg22005243
CVE ID: CVE-2017-1209 State: PUBLISHED Published: 2017-10-24T21:00:00Z Last Updated: 2024-09-16T18:44:50.148Z Vendors: IBM Products: Daeja ViewONE Problem Types: Cross-Site Scripting Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123849 - http://www.ibm.com/support/docview.wss?uid=swg22008
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123849 - http://www.ibm.com/support/docview.wss?uid=swg22008010
CVE ID: CVE-2017-1210 State: PUBLISHED Published: 2017-10-24T21:00:00Z Last Updated: 2024-09-16T22:16:12.511Z Vendors: IBM Products: Daeja ViewONE Problem Types: Data Manipulation Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123850 - http://www.ibm.com/support/docview.wss?uid=swg22008009
CVE ID: CVE-2017-1211 State: PUBLISHED Published: 2017-10-24T21:00:00 Last Updated: 2024-08-05T13:25:17.450Z Vendors: IBM Products: Daeja ViewONE Problem Types: Obtain Information Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123851 - http://www.securityfocus.com/bid/101526
CVE ID: CVE-2017-1212 State: PUBLISHED Published: 2017-10-24T21:00:00Z Last Updated: 2024-09-17T00:06:29.320Z Vendors: IBM Products: Daeja ViewONE Problem Types: Denial of Service Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123852
CVE ID: CVE-2017-1214 State: PUBLISHED Published: 2017-06-12T19:00:00 Last Updated: 2024-08-05T13:25:17.535Z Vendors: IBM Products: iNotes Problem Types: Obtain Information Description: IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123854 - http://www.ibm.com/support/docview.wss?uid=swg22002015
CVE ID: CVE-2017-1217 State: PUBLISHED Published: 2017-07-05T13:00:00Z Last Updated: 2024-09-16T23:41:47.358Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123857 Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038797 - http://www.ibm.com/support/docview.wss?uid=swg22004348 - https://exchange.xforce.ibmcloud.com/vulnerabi
com/id/1038797 - http://www.ibm.com/support/docview.wss?uid=swg22004348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123857 - http://www.securityfocus.com/bid/99350
CVE ID: CVE-2017-1218 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-16T19:39:57.989Z Vendors: IBM Products: BigFix family Problem Types: Gain Access Description: IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99916 - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22005246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123858
CVE ID: CVE-2017-1219 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-16T18:28:25.974Z Vendors: IBM Products: BigFix family Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123859
CVE ID: CVE-2017-1220 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123860
CVE ID: CVE-2017-1221 State: PUBLISHED Published: 2017-11-13T23:00:00Z Last Updated: 2024-09-17T03:02:31.456Z Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123861 - http://www.ibm.com/support/docview.wss?uid=swg22010177
CVE ID: CVE-2017-1222 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123862
CVE ID: CVE-2017-1223 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-16T19:26:00.310Z Vendors: IBM Products: BigFix family Problem Types: Gain Access Description: IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123902. Additional Analyst Notes: - CVE Program
formation or conduct further attacks against the victim. IBM X-Force ID: 123902. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99916 - http://www.ibm.com/support/docview.wss?uid=swg22005246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123902
CVE ID: CVE-2017-1224 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-17T03:08:15.169Z Vendors: IBM Products: BigFix family Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123903 - http://www.securityfocus.com/bid/99916 - http://www.ibm.com/support/docview.wss?uid=swg22005246
CVE ID: CVE-2017-1225 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123904
CVE ID: CVE-2017-1226 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123905 - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673
CVE ID: CVE-2017-1227 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-16T17:14:56.582Z Vendors: IBM Products: BigFix Platform Problem Types: Denial of Service Description: IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22003222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123906
CVE ID: CVE-2017-1228 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com
rityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123907
CVE ID: CVE-2017-1229 State: PUBLISHED Published: 2017-11-13T23:00:00Z Last Updated: 2024-09-17T02:58:03.806Z Vendors: IBM Products: BigFix family Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12390
s: - http://www.ibm.com/support/docview.wss?uid=swg22005246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123908
CVE ID: CVE-2017-1230 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123909 - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673
CVE ID: CVE-2017-1231 State: PUBLISHED Published: 2018-10-12T05:00:00Z Last Updated: 2024-09-17T01:41:26.914Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123910 - https://www-01.ibm.com/support/docview.wss?uid=ibm10724511
CVE ID: CVE-2017-1232 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:25:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123911
CVE ID: CVE-2017-1233 State: PUBLISHED Published: 2018-01-31T15:00:00Z Last Updated: 2024-09-16T19:19:39.531Z Vendors: IBM Products: BigFix Remote Control Problem Types: Gain Privileges Description: IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123912 - http://www.ibm.com/support/docview.wss?uid=swg22011765