Vulnerability in IBM BigFix Remote Control Affects Encryption Protocol
CVE-2015-4953

4.8MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
29 March 2018

Summary

IBM BigFix Remote Control prior to Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 contains an encryption protocol weakness, making it susceptible to man-in-the-middle attacks. This vulnerability allows attackers to decrypt intercepted traffic, potentially compromising sensitive data during transmission. Organizations using this product should consider applying the appropriate patches and implementing additional security measures to safeguard their communications.

References

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.