← Back to browse · API

CVE-2019-4013

Severity
CRITICAL
CVSS
9.0
EPSS
0.13857
Risk score
40.85
CISA KEV
No
PoC
No
Published
2019-04-10
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2019-13620, GHSA-J7CC-79CV-HX68
Products
HCLSoftware:BigFix Platform 9.5
Sources
euvd EUVD-2019-13620

Description

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.

References