Vulnerability Bulletins

IBM Security Bulletin: An IBM BigFix Platform Vulnerability Could Allow OS Command Injection Vulnerability (CVE-2016-0291 )

   
Affected software IBM
 
BigFix WeReports server may allow OS Command InjectionCVE(s): CVE-2016-0291Affected product(s) and affected version(s):9.0, 9.1, 9.2Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21985748X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111302

More info:

https://www.ibm.com/blogs/psirt/ibm-security-bulletin-an-ibm-bigfix-platform-vulnerability-could-allow-os-command-injection-vulnerability-cve-2016-0291/