CVE Catalog
CVE-2016-2944
CriticalSummary
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, making it easier for remote attackers to gain access via a brute-force approach.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data loss or security breaches.
Recommendation
It is recommended to update IBM BigFix Remote Control to version 9.1.3 or later and implement additional security measures, such as account locking after several failed login attempts.
Original NVD description (English source)
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.