PT-2023-21489 · Ibm · Bigfix Webui
CVE-2023-28023
·
Published
2023-07-18
·
Updated
2023-08-01
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
BigFix WebUI Software Distribution interface site versions prior to 44
Description
A cross-site request forgery issue in the BigFix WebUI Software Distribution interface site allows an NMO attacker to access files on server-side systems, including the server machine and all the ones in its network.
Recommendations
For versions prior to 44, update to a version 44 or later to resolve the issue. As a temporary workaround, consider restricting access to the BigFix WebUI Software Distribution interface site to minimize the risk of exploitation.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bigfix Webui