PT-2017-12491 · Ibm · Ibm Tivoli Endpoint Manager

Published 2017-10-26 · Updated 2019-10-03 · CVE-2017-1232

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager versions 9.2 through 9.5

Description The issue involves the transmission of sensitive data in cleartext, allowing unauthorized actors to intercept this information.

Recommendations For versions 9.2 through 9.5, update to a version that encrypts sensitive data in communication channels to prevent interception by unauthorized actors.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2017-1232

Affected Products

Ibm Tivoli Endpoint Manager

References · 5

• http://ibm.com/support/docview.wss?uid=swg22009673 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/123911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1232 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1232 · Vendor Advisory
• http://securityfocus.com/bid/101571 · Note