Page 5 of 62 results (0.009 seconds)

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1222

https://notcve.org/view.php?id=CVE-2017-1222

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) no realiza chequeos de autenticación para un recurso o funcionalidad críticos, permitiendo que los usuarios anónimos accedan a áreas protegidas. IBM X-Force ID: 123862. • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-287: Improper Authentication •

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1225

https://notcve.org/view.php?id=CVE-2017-1225

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) almacena información sensible en parámetros URL. Esto puede llevar a una revelación de información si terceros no autorizados acceden a las URL mediante registros del servidor, ... • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1226

https://notcve.org/view.php?id=CVE-2017-1226

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) genera un mensaje de error en registros de error que incluye información sensible sobre su entorno que podría emplearse en más ataques contra el sistema. IBM X-Force ID: 123905. • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1228

https://notcve.org/view.php?id=CVE-2017-1228

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) podría permitir que un atacante remoto obtenga información sensible, debido a que no se habilita correctamente el atribu... • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1230

https://notcve.org/view.php?id=CVE-2017-1230

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) emplea números o valores aleatorios insuficientes en un contexto de seguridad que depende de números impredecibles. Esta debilidad podría permitir que atacante... • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1232

https://notcve.org/view.php?id=CVE-2017-1232

26 Oct 2017 — IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911. IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) transmite datos sensibles o críticos para la seguridad en texto claro en un canal de comunicación que puede ser rastreado por actores no autorizados. IBM X-Force ID: 123911. • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-319: Cleartext Transmission of Sensitive Information •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1521

https://notcve.org/view.php?id=CVE-2017-1521

26 Oct 2017 — IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831. IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 y 9.5) es vulnerable a Cross-Sit... • http://www.ibm.com/support/docview.wss?uid=swg22009673 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2017-1227

https://notcve.org/view.php?id=CVE-2017-1227

31 Jul 2017 — IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906. IBM Tivoli Endpoint Manager podría permitir a un usuario no autorizado consumir todos los recursos y bloquear el sistema. ID de IBM X-Force: 123906. • http://www.ibm.com/support/docview.wss?uid=swg22003222 • CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 6.1EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-1203

https://notcve.org/view.php?id=CVE-2017-1203

19 Jul 2017 — IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678. La plataforma y las aplicaciones de IBM Tivoli Endpoint Manager (para Lifecycle/Power/Patch) son vulnerables a un problema de tipo cross-site-scripting. Esta vulnerabilidad ... • http://www.ibm.com/support/docview.wss?uid=swg22005246 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-1218

https://notcve.org/view.php?id=CVE-2017-1218

19 Jul 2017 — IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858. IBM Tivoli Endpoint Manager es vulnerable a un problema de tipo cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que el sitio web confía. ID de IBM X-Force: 123858. • http://www.ibm.com/support/docview.wss?uid=swg22005246 • CWE-352: Cross-Site Request Forgery (CSRF) •