CVE-2019-4061

概要

参考情報

• ibm.com/support/docview.wss · Broken Link
• rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum · Third Party Advisory
• securityfocus.com/bid/107189 · Broken Link
• exchange.xforce.ibmcloud.com/vulnerabilities/156869 · VDB Entry

bigfix platform のその他の脆弱性

• CVE-2019-4058中 6.5IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information norma…
• CVE-2019-4011中 5.4IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
• CVE-2018-2005低 3.3IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with eleva…
• CVE-2019-4013緊急 9.9IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This resul…
• CVE-2018-1485中 4.3IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which cou…