Low severity3.7NVD Advisory· Published Oct 26, 2017· Updated May 13, 2026

CVE-2017-1228

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.

Affected products

IBM/Bigfix Platform2 versions
cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/101571nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/123907nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000