Sensitive Information Disclosure in IBM BigFix Inventory

CVE-2016-8977

What is CVE-2016-8977?

IBM BigFix Inventory v9 contains a vulnerability that may allow unauthorized users to expose sensitive information via HTTP GET requests. This weakness can be exploited by an attacker to gain insights or access that could facilitate subsequent attacks on the system. Organizations using this version should take immediate action to secure their implementations and monitor for unauthorized access.

References