CVE-2017-1231

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

VendorProductVersions
IBMBigFix Platform9.5; 9.5.1; 9.5.2; 9.5.3; 9.5.4; 9.5.5; 9.5.6; 9.5.7; 9.5.8; 9.5.9

References

Timeline

Published
Oct 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-123107.5A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sCVE-2017-123115.8A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco MeetiCVE-2017-123126.7An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local aCVE-2017-123136.7An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, lCVE-2017-123147.8A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attacCVE-2017-123156.0A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local aCVE-2017-123167.5A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to peCVE-2017-123176.7The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local applicationCVE-2017-123187.5A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affecteCVE-2017-123195.9A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow aCVE-2017-12325.9IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication CVE-2017-123206.1Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate
CVE-2017-1231: High severity, CVSS 7.8 | Vulnix