CVE-2016-2951

EUVD-2016-4024
IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
ibmbigfix_remote_control
𝑥
≤ 9.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885
http://www.securityfocus.com/bid/94601
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885
http://www.securityfocus.com/bid/94601