PT-2019-9973 · Ibm · Ibm Bigfix Platform

Published 2019-05-20 · Updated 2019-10-09 · CVE-2018-2005

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform versions 9.2 through 9.5

Description The issue concerns the storage of potentially sensitive information in process memory by the IBM BigFix Platform. This information could be accessed by a local attacker who has elevated permissions.

Recommendations For IBM BigFix Platform versions 9.2 through 9.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-2005

Affected Products

Ibm Bigfix Platform

References · 4

• https://ibm.com/support/docview.wss?uid=ibm10881996 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/155007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2005 · Security Note
• https://osv.dev/vulnerability/CVE-2018-2005 · Vendor Advisory