CVE-2019-4061: ibm bigfix_platform
Vulnerability summary
CVE-2019-4061 is a medium (CVSS 5.3) vulnerability in ibm bigfix_platform. EPSS estimates a 22.55% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 27-02-2019PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
22.55%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 22.55% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundIBM BigFix Relay Server Sites and Package Enum
auxiliary/gather/ibm_bigfix_sites_packages_enum
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Ibm1 product
- bigfix_platform9.2 | 9.5 | ≥ 9.2, ≤ 9.2.16 | ≥ 9.5, ≤ 9.5.11
1 vendor · 1 product
References
4 links- www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enumX Refsource MISCThird Party Advisory