CVE-2018-1476: Infoleak
Published Dec 12, 2018
·Updated
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.
Affected Software
2 affected components
IBM BigFix Platform>=9.2<=9.2.14
IBM BigFix Platform>=9.5<=9.5.9
Event History
Dec 12, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1476?
CVE-2018-1476 has a medium severity rating as it discloses sensitive information to unauthorized users.
2
How do I fix CVE-2018-1476?
To mitigate CVE-2018-1476, upgrade to IBM BigFix Platform version 9.5.10 or later.
3
What systems are affected by CVE-2018-1476?
CVE-2018-1476 affects IBM BigFix Platform versions 9.2.0 through 9.2.14 and 9.5 through 9.5.9.
4
What type of data is disclosed in CVE-2018-1476?
CVE-2018-1476 discloses sensitive information that can be utilized for further attacks on the system.
5
Is CVE-2018-1476 remote exploit possible?
CVE-2018-1476 does not specifically indicate remote exploit capabilities, but it allows unauthorized access to sensitive information.