CVE-2016-2937
medium
CVSS v3
6.5
CVSS v2
6.4
VIR risk
6.5
Description
IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."
Predictions
Exploit likelihood
75%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21991887
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg1IV89783
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | bigfix_remote_control | {"endIncluding":"9.1.2"} | |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89783
- http://www-01.ibm.com/support/docview.wss?uid=swg21991887
- http://www.securityfocus.com/bid/94646
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89783
- http://www-01.ibm.com/support/docview.wss?uid=swg21991887
- http://www.securityfocus.com/bid/94646
CWEs
CWE-20 CWE-200
Verify integrity in audit chain (admin only). AS-IS.