CVE-2019-4061

Опубликовано: 27 фев. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Высокий

Описание

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10870242
Broken Link
Vendor Advisory
http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
Third Party Advisory
http://www.securityfocus.com/bid/107189
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/156869
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10870242
Broken Link
Vendor Advisory
http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
Third Party Advisory
http://www.securityfocus.com/bid/107189
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/156869
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*

Версия от 9.2 (включая) до 9.2.16 (включая)

cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*

Версия от 9.5 (включая) до 9.5.11 (включая)

EPSS

Процентиль: 99%

0.78782

Высокий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-wr9c-mhm3-3p93

CVSS3: 5.3

github

больше 3 лет назад

EPSS

Процентиль: 99%

0.78782

Высокий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200