CVE-2019-4061 json
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets de…
published 2019-02-27 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-13668
- cvss
- 5.3
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 22.5%
- EPSS 22.5% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Metasploit, plus a Nuclei check
Summary
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Timeline
- Published
- First public exploit (Metasploit auxiliary/gather/ibm_bigfix_sites_packages_enum)
Exploit prediction
22.55% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit auxiliary/gather/ibm_bigfix_sites_packages_enum IBM BigFix Relay Server Sites and Package Enum metasploit auxiliary, normal rank, 2019-03-18
- Nuclei template IBM BigFix Platform - Information Disclosure nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 5.3 | CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O |
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| CNA | 3.0 | 5.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- IBM BigFix Platform
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
exchange.xforce.ibmcloud.com
/vulnerabilities/156869
vdb-entry, vendor-advisory
-
ibm.com
/support/docview.wss?uid=ibm10870242
broken-link, vendor-advisory
-
securityfocus.com
/bid/107189
vdb-entry, broken-link, third-party-advisory
-
rapid7.com
/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
third-party-advisory
Sources
- CVE List CVE-2019-4061
- NVD CVE-2019-4061
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.