CVE-2017-1226

MEDIUM

IBM BigFix Platform 9.2 and 9.5 - Exposure of Sensitive Information in Error Logs

Title source: llm

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905.

References (3)

Core 3

Core References

VDB Entry, Vendor Advisory x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/123905

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101571

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22009673

Scores

CVSS v3 4.3

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

ibm/bigfix_platform 9.2

ibm/bigfix_platform 9.5

Published Oct 26, 2017

Tracked Since Feb 18, 2026