CVE-2016-0292: IBM Bigfix

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report.

Affected products

• IBM Bigfix: version 9.0 only; version 9.1 only; version 9.2 only; version 9.5 only

Published 2016-08-30. Last modified 2026-06-17.