CVE-2016-2944 IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix remote control | <= 9.1.2 | No fix listed |
References
- IV89790 vendor-advisory
- www-01.ibm.com vendor-advisory
- 94623 vdb-entry