Skip to main content

Bigfix Platform CVE-2018-1474

MEDIUM
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)
2018-12-12 psirt@us.ibm.com
4.7
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
4.7 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 12, 2018 - 16:29 nvd
MEDIUM 4.7

DescriptionNVD

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information. IBM X-force ID: 140692.

AnalysisAI

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-74. IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information. IBM X-force ID: 140692. Affected products include: Ibm Bigfix Platform. Version information: through 9.2.14.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2019-4013 CRITICAL POC
9.9 Apr 10

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root pr

CVE-2016-6082 CRITICAL
10.0 Feb 01

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free ra

CVE-2017-1221 CRITICAL
9.8 Nov 13

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default

CVE-2018-1475 CRITICAL
9.8 Apr 27

IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute f

CVE-2019-4061 MEDIUM POC
5.3 Feb 27

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the upd

CVE-2017-1218 HIGH
8.8 Jul 19

IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicio

CVE-2024-23554 HIGH
8.8 May 18

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (R

CVE-2023-37536 HIGH
8.8 Oct 11

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP

CVE-2018-1479 HIGH
8.8 Apr 27

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute mal

CVE-2016-0396 HIGH
8.1 Feb 01

IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed wit

CVE-2016-0214 HIGH
7.8 Feb 08

IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. Rated high severity (CVSS 7.8), thi

CVE-2022-38659 HIGH
7.8 Dec 19

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-d

Share

CVE-2018-1474 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy