CVE-2019-4061: IBM Bigfix Platform

Medium severity, CVSS 5.3. EPSS: 22.5% chance of exploitation in the next 30 days.

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.

Affected products

• IBM Bigfix Platform: from 9.2, up to and including 9.2.16; from 9.5, up to and including 9.5.11

Published 2019-02-27. Last modified 2026-06-17.