CVE-2015-4954

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.2-TIV-IBRC912-IF0001

Description The issue improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors.

Recommendations For versions prior to 9.1.2-TIV-IBRC912-IF0001, apply Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 to resolve the issue. As a temporary workaround, consider restricting the use of self-signed certificates until the fix is applied.