CVE-2016-2927

5.9 mediumEPSS 0.8%

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-11-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:bigfix_remote_control

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
http://www.securityfocus.com/bid/94561
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875

Check your stack JSON