Cross-Site Request Forgery Vulnerability in IBM BigFix Platform
CVE-2018-1479

8.8HIGH

Key Information:

Vendor

IBM
Status
Bigfix Platform
Vendor
CVE Published:
27 April 2018

What is CVE-2018-1479?

The IBM BigFix Platform versions 9.2 and 9.5 are susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw allows attackers to potentially perform unauthorized actions on behalf of a trusted user. By exploiting this vulnerability, an attacker can send a forged request, thus executing commands that the victim did not intend. Organizations using affected versions are recommended to implement security patches provided by IBM to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BigFix Platform 9.2

BigFix Platform 9.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/140761
vdb-entryx_refsource_XF
http://www.ibm.com/support/docview.wss?uid=swg22015754
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.