Information disclosure

2019-02-0518:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.

CPENameOperatorVersion
bigfix_compliancege1.7
bigfix_compliancele1.9.91

CPE	Name	Operator	Version
	bigfix_compliance	ge	1.7
	bigfix_compliance	le	1.9.91

References

exchange.xforce.ibmcloud.com/vulnerabilities/123673

www-01.ibm.com/support/docview.wss?uid=ibm10737581