CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2016-8963
https://notcve.org/view.php?id=CVE-2016-8963
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user. IBM BigFix Inventory v9 almacena información potencialmente sensible en archivos de registro que pueden ser leídos por un usuario local. • http://www.ibm.com/support/docview.wss?uid=swg21995029 http://www.securityfocus.com/bid/95282 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2016-8967
https://notcve.org/view.php?id=CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user. IBM BigFix Inventory v9 9.2 almacena las credenciales de usuario en un texto claro que puede ser leído por un usuario local. • http://www.ibm.com/support/docview.wss?uid=swg21995019 http://www.securityfocus.com/bid/95902 • CWE-255: Credentials Management Errors •
CVSS: 5.9EPSS: 0%CPEs: 7EXPL: 0CVE-2016-8966
https://notcve.org/view.php?id=CVE-2016-8966
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM BigFix Inventory v9 podría permitir a un atacante remoto obtener información sensible, causado por el error para habilitar correctamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información sensible utilizando técnicas man-in-the-middle. • http://www.ibm.com/support/docview.wss?uid=swg21995023 http://www.securityfocus.com/bid/95138 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0CVE-2016-8961
https://notcve.org/view.php?id=CVE-2016-8961
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM BigFix Inventory v9 podría permitir a un atacante remoto realizar ataques de phishing, utilizando un ataque de redirección abierto. Persuadiendo a una víctima para que visite una web especialmente manipulada, un atacante remoto podría explotar esta vulnerabilidad para falsificar la URL mostrada para redirigir a un usuario a un sitio web malicioso que parecería ser de confianza. • http://www.ibm.com/support/docview.wss?uid=swg21995037 http://www.securityfocus.com/bid/95128 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2016-8981
https://notcve.org/view.php?id=CVE-2016-8981
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. IBM BigFix Inventory v9 permite que las páginas web se almacenen localmente de forma que puedan ser leídas por otro usuario en el sistema. • http://www.ibm.com/support/docview.wss?uid=swg21994932 http://www.securityfocus.com/bid/95137 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •