VULNERABILITY INTELLIGENCE

CVE-2019-4013

CVSS score9 CRITICAL
EPSS probability13.00%
CISA KEVNot currently listed
Published2019-04-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references