CVE-2017-1225: Infoleak
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1225?
CVE-2017-1225 has a medium severity rating due to the potential for sensitive information disclosure.
How do I fix CVE-2017-1225?
To mitigate CVE-2017-1225, ensure that sensitive information is not included in URL parameters and implement proper access controls.
What products are affected by CVE-2017-1225?
CVE-2017-1225 affects IBM BigFix Platform versions 9.2 and 9.5.
What kind of information can be disclosed due to CVE-2017-1225?
CVE-2017-1225 can lead to the disclosure of sensitive information contained in URL parameters.
How can unauthorized access occur with CVE-2017-1225?
Unauthorized access to sensitive information may occur if individuals gain access to server logs, browser history, or referrer headers containing the vulnerable URLs.