ZeroHour

CVE-2016-10684

CVSS 3.0
8.1 high
EPSS
2%p77
Published
()
Modified
Description

healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.

Vendors
healthcenter project
Products
healthcenter
Weakness
CWE-311, CWE-310
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.