CVE-2016-8977: Infoleak
Published Feb 1, 2017
·Updated
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.
Affected Software
13 affected components
IBM License Metric Tool=9.2.0
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
IBM BigFix Inventory=9.2
All of the following
IBM License Metric Tool=9.2.0
Any of the following
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Event History
Feb 1, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8977?
CVE-2016-8977 is considered a medium severity vulnerability due to its potential to disclose sensitive information.
2
How do I fix CVE-2016-8977?
To fix CVE-2016-8977, upgrade to the latest version of IBM BigFix Inventory that addresses the vulnerability.
3
What products are affected by CVE-2016-8977?
CVE-2016-8977 specifically affects IBM BigFix Inventory version 9.2.0.
4
Can CVE-2016-8977 be exploited remotely?
Yes, CVE-2016-8977 can be exploited remotely through unauthorized HTTP GET requests.
5
What type of data can be exposed by CVE-2016-8977?
CVE-2016-8977 can expose sensitive information that could be leveraged for further attacks against the system.