CVE-2016-2927

EUVD-2016-4000
IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
ibmbigfix_remote_control
𝑥
≤ 9.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
http://www.securityfocus.com/bid/94561
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
http://www.securityfocus.com/bid/94561