CVE-2018-2005 IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
LowCVSS 3.3
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix platform | >= 9.2, <= 9.2.17 | No fix listed |
| ibm bigfix platform | >= 9.5, <= 9.5.12 | No fix listed |
| ibm bigfix platform | = 9.2 | No fix listed |
| ibm bigfix platform | = 9.5 | No fix listed |
References
- ibm-bigfix-cve20182005-info-disc (155007) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory