Medium severity5.9NVD Advisory· Published Nov 13, 2017· Updated May 13, 2026

CVE-2017-1229

Description

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908.

Affected products

IBM/Bigfix Platform2 versions
cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*
IBM/BigFix familyv5
Range: 9.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ibm.com/support/docview.wssnvdIssue TrackingVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/123908nvdIssue TrackingVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000