CVE-2016-0291 IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.
HighCVSS 8.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix platform | >= 9.1, < 9.1.8 | 9.1.8 |
| ibm bigfix platform | >= 9.2, < 9.2.8 | 9.2.8 |
| ibm bigfix platform | = 9.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-mdm-cve20160291-command-injection(111302) vdb-entry vendor-advisory