Cross-Site Request Forgery Vulnerability in IBM BigFix Platform
CVE-2018-1479
8.8HIGH
Summary
The IBM BigFix Platform versions 9.2 and 9.5 are susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw allows attackers to potentially perform unauthorized actions on behalf of a trusted user. By exploiting this vulnerability, an attacker can send a forged request, thus executing commands that the victim did not intend. Organizations using affected versions are recommended to implement security patches provided by IBM to mitigate potential risks.
Affected Version(s)
BigFix Platform 9.2
BigFix Platform 9.5
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved