IBM BigFix Platform CVE-2017-1231 Local Information Disclosure Vulnerability

Bugtraq ID:	107781
Class:	Design Error
CVE:	CVE-2017-1231
Remote:	No
Local:	Yes
Published:	Oct 15 2018 12:00AM
Updated:	Oct 15 2018 12:00AM
Credit:	IBM X-Force Ethical Hacking Team: Ron Craig, Warren Moynihan, Jonathan Fitz-Gerald, John Zuccato, Rodney Ryan, Chris Shepherd, Dmitriy Beryoza
Vulnerable:	IBM BigFix Platform 9.5.9 IBM BigFix Platform 9.5.8 IBM BigFix Platform 9.5.7 IBM BigFix Platform 9.5.6 IBM BigFix Platform 9.5.5 IBM BigFix Platform 9.5.4 IBM BigFix Platform 9.5.3 IBM BigFix Platform 9.5.2 IBM BigFix Platform 9.5.1 IBM BigFix Platform 9.5
Not Vulnerable:

IBM BigFix Platform CVE-2017-1231 Local Information Disclosure Vulnerability

IBM BigFix Platform is prone to local information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.

IBM BigFix Platform versions 9.5 through 9.5.9 are vulnerable.

IBM BigFix Platform CVE-2017-1231 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM BigFix Platform CVE-2017-1231 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM BigFix Platform CVE-2017-1231 Local Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• ibm10724511: BigFix Platform 9.5.x affected by vulnerability CVE-2017-1231 (IBM)