CVE-2018-1476 IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix platform | >= 9.2, <= 9.2.14 | No fix listed |
| ibm bigfix platform | >= 9.5, <= 9.5.9 | No fix listed |
| ibm bigfix platform | = 9.5.9 | No fix listed |
| ibm bigfix platform | = 9.2.0 | No fix listed |
| ibm bigfix platform | = 9.2.14 | No fix listed |
| ibm bigfix platform | = 9.5.0 | No fix listed |
References
- ibm-bigfix-cve20181476-info-disc(140757) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory