CVE-2016-8981: Infoleak
Published Feb 1, 2017
·Updated
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.
Affected Software
13 affected components
IBM License Metric Tool=9.2.0
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
IBM BigFix Inventory=9.2
All of the following
IBM License Metric Tool=9.2.0
Any of the following
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Event History
Feb 1, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Data Sourced
via NVD·08:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8981?
CVE-2016-8981 is classified as a moderate vulnerability due to its impact on confidentiality and the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2016-8981?
To fix CVE-2016-8981, update to the latest version of IBM BigFix Inventory that addresses this vulnerability.
3
What versions of IBM BigFix Inventory are affected by CVE-2016-8981?
IBM BigFix Inventory v9.2 is affected by CVE-2016-8981.
4
Can CVE-2016-8981 be exploited remotely?
CVE-2016-8981 requires local access to exploit, as it involves locally stored web pages.
5
What are the implications of CVE-2016-8981 for users?
Users may face risks of data exposure, as locally stored web pages can be accessed by unauthorized individuals on the same system.