Skip to content
OpenAdvisories
Medium · 6.3 CVE-2019-4012 EUVD-2019-13619GHSA-8hh6-r5qj-rf5q

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-c…

Published Apr 15, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886.

Affected products

VendorProductAffectedFixed
IBM BigFix WebUI Profile Management 6 —
IBM BigFix WebUI Software Distribution 23 —

References