CVE-2017-1230 — Sensitive Information Exposure in IBM Bigfix Platform

CWE-200 — Sensitive Information ExposureCWE-1230 — Exposure of Sensitive Information Through Metadata4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 55.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Bigfix Platform
Timeline
PublishedOct 26
Latest updateAug 14

Description

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDibm/bigfix_platform9.2, 9.5+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cq3j-4cx7-jf75: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9↗2022-05-17
▶
CVEList
CVE-2017-1230: IBM Tivoli Endpoint Manager (IBM BigFix Platform 9↗2017-10-26
▶

📋Vendor Advisories

1
Red Hat
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table↗2025-08-14
▶
CVE-2017-1230 — Sensitive Information Exposure in IBM | cvebase