IBM BigFix Platform 9.5.x < 9.5.10 Plain Text Credentials

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.5.x prior to 9.5.10. It is therefore affected by an information disclosure vulnerability as a result of storing user credentials in plain text, which could be read by an authenticated...

IBM BigFix Platform 9.5.x < 9.5.12 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.5.x prior to 9.5.12. It is, therefore, affected by multiple vulnerabilities : - An arbitrary file upload vulnerability exists in IBM BigFix Platform. An authenticated, remote attacker can...

CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

Sql injection

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

CVE-2019-4012

CVE-2019-4012 affects IBM BigFix WebUI Profile Management 6 and IBM BigFix Software Distribution 23. The root cause is a SQL injection vulnerability due to a lack of validation of externally entered SQL statements, enabling a remote attacker to view, add, modify, or delete data in the back-end da...

CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

PT-2019-16840 · Ibm · Ibm Bigfix Software Distribution +1

Name of the Vulnerable Software and Affected Versions: IBM BigFix WebUI Profile Management version 6 IBM BigFix Software Distribution version 23 Description: The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delet...

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management SQL Injection Vulnerabilities

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management are both products of IBM Corporation of the U.S.A. IBM BigFix WebUI Software Distribution is a software distribution application.IBM BigFix WebUI Profile Management is a configuration management application. IBM BigFix...

IBM BigFix Platform Unauthorized Operation Vulnerability

IBM BigFix Platform is a dynamic, content-driven messaging and management system from IBM, USA. A security vulnerability exists in IBM BigFix Platform versions 9.5 through 9.5.11. An attacker could exploit the vulnerability to upload files to the server with elevated privileges and perform...

Design/Logic Flaw

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887...

CVE-2019-4013

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887...

CVE-2019-4013

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887...

CVE-2019-4013

CVE-2019-4013 affects IBM BigFix Platform (9.5.x, including 9.5.x prior to 9.5.12; e.g., 9.5.9.62) and is an Arbitrary File Upload vulnerability. A authenticated user can upload arbitrary files to any location on the server with root privileges due to path traversal and insufficient validation, e...

CVE-2019-4013

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887...

IBM BigFix Relay Server Sites and Package Enum

This module retrieves masthead, site, and available package information from IBM BigFix Relay Servers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM BigFix Relay Server Sites and Package...

CVE-2019-4061

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...

CVE-2019-4061

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...

Design/Logic Flaw

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...

CVE-2019-4061

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...