{"id":"CVE-2019-4061","published":"2019-02-27T22:00:00Z","modified":"2024-09-17T03:34:21Z","title":"IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the…","vendor":"IBM","product":"BigFix Platform","tier":"core","eol":null,"affectedVersions":[{"vendor":"IBM","product":"BigFix Platform","versions":["9.2","9.5"]}],"description":{"text":"IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.22547,"percentile":0.97703,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-04-08","exploitedFirstSeen":"2024-04-08","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-08&host_type=src&vulnerability=cve-2019-4061","date":"2024-04-08"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-15&host_type=src&vulnerability=cve-2019-4061","date":"2024-04-15"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-22&host_type=src&vulnerability=cve-2019-4061","date":"2024-04-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-29&host_type=src&vulnerability=cve-2019-4061","date":"2024-04-29"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-06&host_type=src&vulnerability=cve-2019-4061","date":"2024-05-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-11&host_type=src&vulnerability=cve-2019-4061","date":"2024-05-11"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-13&host_type=src&vulnerability=cve-2019-4061","date":"2024-05-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-20&host_type=src&vulnerability=cve-2019-4061","date":"2024-05-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-27&host_type=src&vulnerability=cve-2019-4061","date":"2024-05-27"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-06-03&host_type=src&vulnerability=cve-2019-4061","date":"2024-06-03"}],"evidenceTotal":33,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/156869","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/107189","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10870242","tags":["x_refsource_CONFIRM"]},{"url":"http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2019-13668","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13668","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"metasploit":[{"name":"IBM BigFix Relay Server Sites and Package Enum","module":"auxiliary/gather/ibm_bigfix_sites_packages_enum","type":"auxiliary","disclosureDate":"2019-03-18","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum.rb"}],"nuclei":[{"id":"CVE-2019-4061","name":"IBM BigFix Platform - Information Disclosure","severity":"medium","path":"http/cves/2019/CVE-2019-4061.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4061.yaml"}],"first":{"date":"2019-03-18","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2019-02-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2019-4061","provenance":"source"},{"date":"2019-03-18","kind":"exploit-public","label":"First public exploit: Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum.rb","provenance":"source"},{"date":"2024-04-08","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-08&host_type=src&vulnerability=cve-2019-4061","provenance":"source"}],"speed":{"daysToPublicExploit":19,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":63.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 934 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.54,"detail":"percentile 0.9770"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":3.71,"detail":"base score 5.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}