2017-10-26

CVE-2017-1228 Oct 26, 21:29 LOW PATCH Monitor

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

CVE-2017-15096 Oct 26, 17:29 LOW Monitor

A flaw was found in GlusterFS in versions prior to 3.10. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.