CVE-2017-1226: Infoleak
Published Oct 26, 2017
·Updated
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905.
Affected Software
2 affected components
IBM BigFix Platform=9.2
IBM BigFix Platform=9.5
Remediation
Patch Available
Event History
Oct 26, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1226?
CVE-2017-1226 has a medium severity rating due to the potential exposure of sensitive information.
2
How do I fix CVE-2017-1226?
To mitigate CVE-2017-1226, upgrade to IBM BigFix Platform version 9.5 or later.
3
What systems are affected by CVE-2017-1226?
CVE-2017-1226 affects IBM BigFix Platform versions 9.2 and 9.5.
4
What information is exposed by CVE-2017-1226?
CVE-2017-1226 exposes sensitive environment information through error logs.
5
Can CVE-2017-1226 lead to further attacks?
Yes, the sensitive information revealed by CVE-2017-1226 could be exploited for subsequent attacks.