Vulnerability in IBM BigFix Remote Control Affects Encryption Protocol
CVE-2015-4953

4.8MEDIUM

Key Information:

Vendor
IBM
Status
Bigfix Remote Control
Vendor
CVE Published:
29 March 2018

Summary

IBM BigFix Remote Control prior to Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 contains an encryption protocol weakness, making it susceptible to man-in-the-middle attacks. This vulnerability allows attackers to decrypt intercepted traffic, potentially compromising sensitive data during transmission. Organizations using this product should consider applying the appropriate patches and implementing additional security measures to safeguard their communications.

References

https://www-304.ibm.com/support/docview.wss?uid=swg21972041
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/105197
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg1IV81388
vendor-advisoryx_refsource_AIXAPAR

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.