Local File Access Vulnerability in IBM BigFix Inventory
CVE-2016-8981
5.5MEDIUM
Summary
IBM BigFix Inventory version 9 contains a vulnerability that allows web pages to be stored locally, presenting a risk wherein sensitive information can be accessed by other users sharing the same system. This poses significant threats to data integrity and privacy within multi-user environments. Proper precautions and mitigations are essential to protect against unauthorized access and ensure secure operations.
Affected Version(s)
BigFix Inventory 9.2
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved