CVE-2019-40615.3MediumCWE-200

CVE-2019-4061: IBM BigFix Platform - Information Disclosure

IBM · BigFix Platform

Affected: IBM BigFix Platform · Exploitation: check available, not yet exploited

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

22.6%probability of exploitation in the next 30 days

97th percentile

050100

Higher than 97% of scored CVEs

5.3MediumCVSS 3.0

LowMediumHighCrit.

DescriptionCVE.org

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

IBM · BigFix Platform9.2; 9.5

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
CISA KEV: Not listed
Public check: IBM BigFix Platform - Information Disclosure · nuclei template in projectdiscovery/nuclei-templates
Weakness: Information Exposure · Information Disclosure
Vendor: IBM
Published: February 2019
Band: Check available, not yet exploited, February 2019

CoverageNo articles yet

No CyberSIXT article names CVE-2019-4061 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.