Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.

Summary BigFix Platform is shipped with IBM License Metric Tool. Information about a security vulnerability affecting BigFix Platform has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-4095 DESCRIPTION: HCL BigFix Platform could allow a local authenticated attacker t...

CVE-2020-4095

BigFix Platform stores credentials in clear text in system memory, enabling a local attacker with privileges to dump memory and extract credentials for pivoting. Affected: BigFix Platform (IBM/HCL), consistent across CVE-2020-4095 sources (NVD/NVD listing, Red Hat advisory, CNVD, PRION/Design-Log...