CVE-2019-4061

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.

Affected

IBM · BigFix Platform

CVSS v3.1 NVD

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v3.0 IBM

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

22.55% chance of exploitation in the next 30 days, 98th percentile

Nuclei

medium · CWE-200

Published

2019-02-27

Updated

2024-09-17

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4061.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibm_bigfix_sites_package…

Security advisories

• http://www.ibm.com/support/docview.wss?uid=ibm10870242
• https://exchange.xforce.ibmcloud.com/vulnerabilities/156869
• http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
• http://www.securityfocus.com/bid/107189

References

• CVE Record
• NVD entry