CVE-2016-2951

Published: Nov 30, 2016Modified: May 6, 2026

3.7

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

Affected (1)

Products: Ibm: Bigfix Remote Control

1 product

Bigfix Remote Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Bigfix Remote Control	Up to 9.1.2

Related CWEs

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21991885

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/94601

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21991885

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/94601

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.