CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

CVE-2019-4012

CVE-2019-4012 affects IBM BigFix WebUI Profile Management 6 and IBM BigFix Software Distribution 23. The root cause is a SQL injection vulnerability due to a lack of validation of externally entered SQL statements, enabling a remote attacker to view, add, modify, or delete data in the back-end da...