Open Redirect Vulnerability in IBM BigFix Inventory
CVE-2016-8961

6.1MEDIUM

Key Information:

Vendor
IBM
Status
Bigfix Inventory
Vendor
CVE Published:
1 February 2017

Summary

IBM BigFix Inventory v9 is susceptible to an open redirect vulnerability that allows remote attackers to conduct phishing attacks. By enticing users to click on a specially crafted link, attackers can manipulate the URL displayed in the browser, leading users to malicious websites that appear trustworthy. Exploiting this vulnerability could enable attackers to harvest sensitive information and launch further attacks against unsuspecting victims.

Affected Version(s)

BigFix Inventory 9.2

References

http://www.ibm.com/support/docview.wss?uid=swg21995037
x_refsource_CONFIRM
http://www.securityfocus.com/bid/95128
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.