VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 13, 2017· Updated Jun 17, 2026

CVE-2017-1229

CVE-2017-1229

Description

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908.

Affected products

5
  • IBM/Bigfix Platform2 versions
    cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*
  • IBM/Tivoli Endpoint Managerllm-fuzzy
    Range: 9.2 and 9.5
  • IBM/Bigfixllm-fuzzy
    Range: 9.2 and 9.5
  • IBM/BigFix familyv5
    Range: 9.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.