CVE-2016-0291

Severity CVSS v4.0:
Pending analysis
Type:
CWE-78 OS Command Injections
Publication date:
28/02/2018
Last modified:
17/03/2018

Description

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:* 9.1 (including) 9.1.8 (excluding)
cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:* 9.2 (including) 9.2.8 (excluding)
cpe:2.3:a:ibm:bigfix_platform:9.0:*:*:*:*:*:*:*