CVE-2016-8961: Medium severity IBM License Metric Tool vulnerability
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8961?
CVE-2016-8961 has been classified as a medium severity vulnerability.
How do I fix CVE-2016-8961?
To fix CVE-2016-8961, upgrade to IBM BigFix Inventory version 9.2.1 or later.
What systems are affected by CVE-2016-8961?
CVE-2016-8961 affects IBM BigFix Inventory versions up to and including 9.2.0.
Can CVE-2016-8961 allow attackers to compromise user data?
Yes, CVE-2016-8961 can be exploited to conduct phishing attacks, potentially compromising user data.
Is CVE-2016-8961 an open redirect vulnerability?
Yes, CVE-2016-8961 is an open redirect vulnerability that allows attackers to spoof URLs.