CVE-2016-2952

low

Description

IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.

References

http://www.securityfocus.com/bid/94598

http://www-01.ibm.com/support/docview.wss?uid=swg21991871

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89794

Details

Source: Mitre, NVD

Published: 2016-11-30

Updated: 2026-05-06

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 3.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Low

EPSS

EPSS: 0.00452

Detections

Analytics