CVE-2019-4013

Description

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/155887

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13620

http://www.ibm.com/support/docview.wss?uid=ibm10874666

http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS