CVE-2017-1225

MEDIUM

IBM BigFix Platform 9.2 and 9.5 - Exposure of Sensitive Information via URL Parameters

Title source: llm

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101571

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22009673

VDB Entry, Vendor Advisory x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/123904

Scores

CVSS v3 5.3

EPSS 0.0129

EPSS Percentile 66.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

ibm/bigfix_platform 9.2

ibm/bigfix_platform 9.5

Published Oct 26, 2017

Tracked Since Feb 18, 2026