CVE-2019-4013

概要

参考情報

• packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
• ibm.com/support/docview.wss · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/155887 · VDB Entry

bigfix platform のその他の脆弱性

• CVE-2019-4058中 6.5IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information norma…
• CVE-2019-4011中 5.4IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
• CVE-2018-2005低 3.3IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with eleva…
• CVE-2019-4061中 5.3IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets dep…
• CVE-2018-1485中 4.3IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which cou…