CVE-2016-2927 in BigFix Remote Control

Summary

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 03/09/2016
• Disclosure: 11/25/2016
• Moderation: VulDB entry created
• Entries: VDB-93825 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00176
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2927
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2927
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2927/