Low severity3.7NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026
CVE-2018-1481
CVE-2018-1481
Description
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 140763.
Affected products
3cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*range: >=9.2.0,<=9.2.14
- (no CPE)range: 9.2.0 - 9.2.14, 9.5 - 9.5.9
- (no CPE)range: 9.5.9
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/140763nvdVDB EntryVendor Advisory
- www.ibm.com/support/docview.wssnvdVendor Advisory
News mentions
0No linked articles in our index yet.