Remote Code Execution Vulnerability in IBM BigFix Remote Control
CVE-2016-2930

7.5HIGH

Key Information:

Vendor
IBM Corporation
Status
BigFix Remote Control
Vendor
CVE Published:
3 May 2017

Summary

IBM BigFix Remote Control version 9.1.3 is susceptible to a security vulnerability that may allow malicious remote attackers to execute administrative actions without the necessary authentication. This could lead to unauthorized access and control over the system, potentially exposing sensitive data and compromising system integrity. Immediate attention is recommended to secure your installations.

Affected Version(s)

BigFix Remote Control 9.1.3

References

http://www.securityfocus.com/bid/98304
vdb-entryx_refsource_BID
http://www.ibm.com/support/docview.wss?uid=swg22002331
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.