CVE-2017-1224

Published: Jul 19, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.

Affected (5)

Products: Ibm: Bigfix Platform

1 product

Bigfix Platform

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Bigfix Platform	Version 9.2.6
Ibm Bigfix Platform	Version 9.2.7
Ibm Bigfix Platform	Version 9.5.5
Ibm Bigfix Platform	Version 9.5.6
Ibm Bigfix Platform	Version 9.5

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22005246

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/99916

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123903

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22005246

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/99916

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123903

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.