Medium severity5.3NVD Advisory· Published Oct 26, 2017· Updated May 13, 2026
CVE-2017-1225
CVE-2017-1225
Description
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Affected products
2cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/101571nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/123904nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.