CVE-2019-4013

Опубликовано: 10 апр. 2019

Источник: nvd

CVSS3: 9

CVSS3: 9.9

CVSS2: 9

EPSS Средний

Описание

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.

Ссылки

http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
http://www.ibm.com/support/docview.wss?uid=ibm10874666
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/155887
VDB Entry
Vendor Advisory
http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
http://www.ibm.com/support/docview.wss?uid=ibm10874666
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/155887
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*

Версия от 9.5.0 (включая) до 9.5.11 (включая)

EPSS

Процентиль: 95%

0.16831

Средний

9 Critical

CVSS3

9.9 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-j7cc-79cv-hx68

CVSS3: 9.9

github

больше 3 лет назад

EPSS

Процентиль: 95%

0.16831

Средний

9 Critical

CVSS3

9.9 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-434