CVE-2019-4012

Name of the Vulnerable Software and Affected Versions IBM BigFix WebUI Profile Management version 6 IBM BigFix Software Distribution version 23

Description The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in the back-end database. This is due to a SQL injection vulnerability.

Recommendations For IBM BigFix WebUI Profile Management version 6, update to a version that includes a fix for this issue. For IBM BigFix Software Distribution version 23, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.