CVE-2016-8966

IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=swg21995023Vendor Advisory
• http://www.securityfocus.com/bid/95138Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21995023Vendor Advisory
• http://www.securityfocus.com/bid/95138Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8954IBM dashDB Local uses hard-coded credentials that could allo…
• CVE-2016-8960IBM Cognos Business Intelligence 10.2 could allow a user wit…
• CVE-2016-8961IBM BigFix Inventory v9 could allow a remote attacker to con…
• CVE-2016-8962IBM BigFix Inventory 9.2 does not require that users should …
• CVE-2016-8963IBM BigFix Inventory v9 stores potentially sensitive informa…
• CVE-2016-8964IBM BigFix Inventory v9 9.2 uses an inadequate account locko…
• CVE-2016-8967IBM BigFix Inventory v9 9.2 stores user credentials in plain…
• CVE-2016-8968IBM Jazz Foundation is vulnerable to cross-site scripting. T…
• CVE-2016-8971IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-8972IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain r…
• CVE-2016-8973IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vul…
• CVE-2016-8974IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial o…