CVEvulnerability
CVE-2019-4061
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Affected configurations
• ibm bigfix platform (>= 9.2 <= 9.2.16)
• ibm bigfix platform (>= 9.5 <= 9.5.11)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.ibm.com/support/docview.wss?uid=ibm10870242 Broken Link, Vendor Advisory
- http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum Third Party Advisory
- http://www.securityfocus.com/bid/107189 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156869 VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=ibm10870242 Broken Link, Vendor Advisory
- http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum Third Party Advisory
- http://www.securityfocus.com/bid/107189 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156869 VDB Entry, Vendor Advisory