medium5.3
CVE-2019-4061
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associ…
Impact
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Bigfix Platform | from 9.2 through 9.2.16 from 9.5 through 9.5.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=ibm10870242
- http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
- http://www.securityfocus.com/bid/107189
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156869
- http://www.ibm.com/support/docview.wss?uid=ibm10870242
- http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
- http://www.securityfocus.com/bid/107189
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156869