CVE-2016-8977

EPSS 0.23%
Veröffentlicht 01.02.2017 22:59:01
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ License Metric Tool Version9.2.0

   Hp ≫ Hp-ux
   Ibm ≫ Aix
   Linux ≫ Linux Kernel
   Microsoft ≫ Windows
   Oracle ≫ Solaris

Ibm ≫ Bigfix Inventory Version9.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.461

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ibm.com/support/docview.wss?uid=swg21995014

Vendor Advisory

http://www.securityfocus.com/bid/95308

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-8977

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-8977

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-8977

EUVD