IBM License Metric Tool and BigFix Inventory CVE-2019-4369 Information Disclosure Vulnerability

Bugtraq ID:	109017
Class:	Design Error
CVE:	CVE-2019-4369
Remote:	Yes
Local:	No
Published:	Jun 26 2019 12:00AM
Updated:	Jun 26 2019 12:00AM
Credit:	IBM
Vulnerable:	IBM License Metric Tool 9.2.7 IBM License Metric Tool 9.2 IBM License Metric Tool 9.0.1 IBM License Metric Tool 9.2.7.0 IBM License Metric Tool 9.2.6.0 IBM License Metric Tool 9.2.5.0 IBM License Metric Tool 9.2.4.0 IBM License Metric Tool 9.2.0.2 IBM License Metric Tool 9.2.0.0 IBM License Metric Tool 9.2 IBM License Metric Tool 9.1.0.2 IBM License Metric Tool 9.1 IBM License Metric Tool 9.0 IBM BigFix Inventory 9.2.7 IBM BigFix Inventory 9.2 IBM BigFix Inventory 9.2.7.0 IBM BigFix Inventory 9.2.6.0 IBM BigFix Inventory 9.2.5.0 IBM BigFix Inventory 9.2.4.0 IBM BigFix Inventory 9.2.14 IBM BigFix Inventory 9.2 IBM BigFix Inventory 9.1 IBM BigFix Inventory 9.0
Not Vulnerable:	IBM License Metric Tool 9.2.15 IBM BigFix Inventory 9.2.15

IBM License Metric Tool and BigFix Inventory CVE-2019-4369 Information Disclosure Vulnerability

IBM License Metric Tool and BigFix Inventory are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

IBM License Metric Tool and BigFix Inventory CVE-2019-4369 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM License Metric Tool and BigFix Inventory CVE-2019-4369 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM License Metric Tool and BigFix Inventory CVE-2019-4369 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Sensitive information disclosure affects IBM License Metric Tool v9.x and IBM Bi (IBM)