CVE-2019-4013

Severity: critical (CVSS 9.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-04-10 · updated 2026-06-17
Weakness: CWE-434

Description

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.

Affected products

IBM BigFix Platform: from 9.5.0 through 9.5.11

References

http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
http://www.ibm.com/support/docview.wss?uid=ibm10874666
https://exchange.xforce.ibmcloud.com/vulnerabilities/155887
http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
http://www.ibm.com/support/docview.wss?uid=ibm10874666
https://exchange.xforce.ibmcloud.com/vulnerabilities/155887

Get alerted when CVE-2019-4013 or the next vulnerability affects your stack