CVE-2017-1228

LOW

IBM BigFix Platform 9.2 and 9.5 - Sensitive Information Exposure via Insecure Cookie Attribute

Title source: llm

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101571

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22009673

VDB Entry, Vendor Advisory x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/123907

Scores

CVSS v3 3.7

EPSS 0.0116

EPSS Percentile 63.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

ibm/bigfix_platform 9.2

ibm/bigfix_platform 9.5

Published Oct 26, 2017

Tracked Since Feb 18, 2026