CVE-2018-1600 IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix platform | >= 9.2, <= 9.2.13 | No fix listed |
| ibm bigfix platform | >= 9.5, <= 9.5.8 | No fix listed |
| ibm bigfix platform | = 9.2 | No fix listed |
| ibm bigfix platform | = 9.5 | No fix listed |
References
- www.ibm.com vendor-advisory
- ibm-bigfix-cve20181600-info-disc(143745) vdb-entry vendor-advisory