PT-2019-16841
CVE-2019-4013
·
Published
2019-04-10
·
Updated
2019-10-07
Description by
CVSS 3.1
9.9
CriticalMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM BigFix Platform version 9.5
Description
The issue allows any authenticated user to upload files to any location on the server with root privileges, resulting in code execution on the underlying system with root privileges.
Recommendations
For IBM BigFix Platform version 9.5, update to a version that includes a fix for this issue to prevent code execution with root privileges.
Found an issue in the description? Have something to add? Feel free to write us 👾