CVE-2016-2927

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-25 · updated 2026-06-17
Weakness: CWE-200

Description

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

Affected products

IBM BigFix Remote Control: through 9.1.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
http://www.securityfocus.com/bid/94561
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
http://www-01.ibm.com/support/docview.wss?uid=swg21991875
http://www.securityfocus.com/bid/94561

Get alerted when CVE-2016-2927 or the next vulnerability affects your stack