mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
101 lines
3.2 KiB
JSON
101 lines
3.2 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "psirt@us.ibm.com",
|
|
"DATE_PUBLIC": "2019-02-18T00:00:00",
|
|
"ID": "CVE-2019-4061",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "BigFix Platform",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "9.2"
|
|
},
|
|
{
|
|
"version_value": "9.5"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "IBM"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869."
|
|
}
|
|
]
|
|
},
|
|
"impact": {
|
|
"cvssv3": {
|
|
"BM": {
|
|
"A": "N",
|
|
"AC": "L",
|
|
"AV": "N",
|
|
"C": "L",
|
|
"I": "N",
|
|
"PR": "N",
|
|
"S": "U",
|
|
"SCORE": "5.300",
|
|
"UI": "N"
|
|
},
|
|
"TM": {
|
|
"E": "U",
|
|
"RC": "C",
|
|
"RL": "O"
|
|
}
|
|
}
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Obtain Information"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "ibm-bigfix-cve20194061-info-disc(156869)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/156869"
|
|
},
|
|
{
|
|
"name": "107189",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/107189"
|
|
},
|
|
{
|
|
"name": "http://www.ibm.com/support/docview.wss?uid=ibm10870242",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10870242"
|
|
},
|
|
{
|
|
"refsource": "MISC",
|
|
"name": "http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum",
|
|
"url": "http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum"
|
|
}
|
|
]
|
|
}
|
|
} |