CVE-2016-0291
Severity CVSS v4.0:
Pending analysis
Type:
CWE-78
OS Command Injections
Publication date:
28/02/2018
Last modified:
17/03/2018
Description
IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH
Base Score 2.0
9.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:* | 9.1 (including) | 9.1.8 (excluding) |
cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:* | 9.2 (including) | 9.2.8 (excluding) |
cpe:2.3:a:ibm:bigfix_platform:9.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page