- Home
- CVEs with nessus.description==According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.x prior to 9.5.3. It is, therefore, affected by a command injection vulnerability in the Web Reports component. An unauthenticated, remote attacker can exploit this to inject commands that are executed with privileges that are unnecessary and higher than expected. Note that if the Web Reports component is installed as a stand-alone application without other BigFix components, then it not affected by the vulnerability.
IBM BigFix was formerly known as Tivoli Endpoint Manager, IBM Endpoint Manager, and IBM BigFix Endpoint Manager.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top