CVE-2017-1220

MEDIUM

IBM BigFix Platform 9.2 and 9.5 - Exposure of Sensitive Information

Title source: llm
STIX 2.1

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101571
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22009673
VDB Entry, Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/123860

Scores

CVSS v3 5.3
EPSS 0.0129
EPSS Percentile 66.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
ibm/bigfix_platform 9.2
ibm/bigfix_platform 9.5
Published Oct 26, 2017
Tracked Since Feb 18, 2026