CVE-2016-2936

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors.

Metrics

CVSS 3.0 7.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published: Nov 30, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-29376.5IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted PO CVE-2016-29386.1IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte CVE-2016-29396.1IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte CVE-2016-29405.3Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via un CVE-2016-29415.5IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could b CVE-2016-29427.5IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause CVE-2016-29431.9IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log CVE-2016-29449.8IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtai CVE-2016-29457.5The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 CVE-2016-29467.8Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6 CVE-2016-29472.7IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quali CVE-2016-29487.8IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors.