CVE-2017-1225 in Tivoli Endpoint Manager
Summary
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/30/2016
Disclosure
10/26/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 108636 | IBM Tivoli Endpoint Manager URL History information disclosure | 200 | Not defined | Official fix | CVE-2017-1225 |