2016-08-30

CVE-2016-0397 Aug 30, 17:59 MEDIUM This Month

WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

CVE-2016-0292 Aug 30, 17:59 MEDIUM This Month

WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.