VulnerabilityModified
CVE-2016-2927
IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on…
MEDIUM 5.9EPSS 0.81%
Does this matter?
Lower severity and a low EPSS score (0.81%). Track it; it rarely justifies an emergency change on its own.
Description
IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.81% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/bigfix remote control
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21991875Vendor Advisory
- http://www.securityfocus.com/bid/94561
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21991875Vendor Advisory
- http://www.securityfocus.com/bid/94561
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.