CVE-2017-1228

Опубликовано: 26 окт. 2017

Источник: nvd

CVSS3: 3.7

CVSS2: 4.3

EPSS Низкий

Описание

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22009673
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101571
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123907
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22009673
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101571
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123907
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00234

Низкий

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-xpfr-5vm7-6jx9