CVE-2016-2927

MEDIUM

IBM BigFix Remote Control < 9.1.2 - Exposure of Sensitive Information via Weak Encryption Algorithms

Title source: llm
STIX 2.1

Description

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94561
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792

Scores

CVSS v3 5.9
EPSS 0.0081
EPSS Percentile 52.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
ibm/bigfix_remote_control < 9.1.2
Published Nov 25, 2016
Tracked Since Feb 18, 2026