Cross-Site Request Forgery Vulnerability in IBM BigFix Platform
CVE-2018-1479

8.8HIGH

Key Information:

Vendor
IBM
Status
Bigfix Platform
Vendor
CVE Published:
27 April 2018

Summary

The IBM BigFix Platform versions 9.2 and 9.5 are susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw allows attackers to potentially perform unauthorized actions on behalf of a trusted user. By exploiting this vulnerability, an attacker can send a forged request, thus executing commands that the victim did not intend. Organizations using affected versions are recommended to implement security patches provided by IBM to mitigate potential risks.

Affected Version(s)

BigFix Platform 9.2

BigFix Platform 9.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/140761
vdb-entryx_refsource_XF
http://www.ibm.com/support/docview.wss?uid=swg22015754
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.