CVE-2016-2927

MEDIUM

IBM Bigfix Remote Control < 9.1.2 - Information Disclosure

Title source: rule

Description

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

References (3)

Scores

CVSS v3 5.9
EPSS 0.0018
EPSS Percentile 38.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (2)

ibm/bigfix_remote_control < 9.1.2
n/a/n/a

Timeline

Published Nov 25, 2016
Tracked Since Feb 18, 2026