CVE-2017-1200

CVE-2017-1200 describes an improper certificate validation vulnerability in IBM BigFix Compliance versions 1.7 through 1.9.91. This flaw allows an attacker to conduct a man-in-the-middle (MITM) attack, spoofing a trusted entity and potentially leading to the software connecting to malicious hosts or accepting spoofed data. The vulnerability has a CVSS v3 score of 5.9 (Medium), indicating a network-based attack with high impact on confidentiality, but requiring high attack complexity. There is no user interaction required for exploitation. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.