Medium severity5.3NVD Advisory· Published Oct 26, 2017· Updated Jun 17, 2026
CVE-2017-1225
CVE-2017-1225
Description
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Affected products
4cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/101571nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/123904nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.