Vulnerability in IBM BigFix Remote Control Affects Encryption Protocol
CVE-2015-4953
4.8MEDIUM
Summary
IBM BigFix Remote Control prior to Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 contains an encryption protocol weakness, making it susceptible to man-in-the-middle attacks. This vulnerability allows attackers to decrypt intercepted traffic, potentially compromising sensitive data during transmission. Organizations using this product should consider applying the appropriate patches and implementing additional security measures to safeguard their communications.
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved