cve-2019-4061
MEDIUM CVSS 5.3 vulncheck_kev
Description
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Timeline
- Published
- 2024-04-08 00:00 UTC
- Last Modified
- 2024-04-08
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 5.3,
"datePublished": "2024-04-08T00:00:00Z",
"dateUpdated": "2024-04-08T00:00:00Z",
"description": "IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.",
"dueDate": "",
"id": "CVE-2019-4061",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Unknown",
"product": "bigfix_platform",
"requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
"severity": "MEDIUM",
"source": "vulncheck_kev",
"title": "IBM bigfix_platform Exposure of Sensitive Information to an Unauthorized Actor",
"vendor": "IBM"
}
Enrichment data
Aggregated bundle (all enrichments)