{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-4061/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-4061/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-4061/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-4061/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-4061/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-4061"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-4061"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.22547,
      "kev": false,
      "percentile": 0.97609
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2019/CVE-2019-4061.yaml",
      "nuclei_template_severity": "medium",
      "nuclei_template_yaml": "id: CVE-2019-4061\n\ninfo:\n  name: IBM BigFix Platform - Information Disclosure\n  author: daffainfo\n  severity: medium\n  description: |\n    IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication.\n  impact: |\n    Attackers can remotely gather sensitive update and fixlet deployment information, potentially aiding targeted attacks.\n  remediation: |\n    Enable authenticated access for relay to prevent unauthorized information queries.\n  reference:\n    - https://www.atredis.com/blog/2019/3/18/harvesting-data-from-bigfix-relay-servers\n    - https://github.com/rapid7/metasploit-framework/blob/0fd8f0984e10a135c000d1fb8797d76d62fb24f7/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum.rb\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-4061\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n    cvss-score: 5.3\n    cve-id: CVE-2019-4061\n    epss-score: 0.22547\n    epss-percentile: 0.97609\n    cwe-id: CWE-200\n    cpe: cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: ibm\n    product: bigfix_platform\n    shodan-query: port:52311 \"BigFixHTTPServer\"\n  tags: cve,cve2019,ibm,bigfix,disclosure,vkev,vuln\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/masthead/masthead.axfm\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains_all(body, \"Organization: \", \"-URL: \")'\n        condition: and\n        internal: true\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/bfenterprise/clientregister.exe?RequestType=FetchCommands\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(body, \"x-bes-command-hasiteversion:\")'\n        condition: and\n# digest: 4b0a00483046022100c27e87df7cd199c8a72954d8afc4d05ad205d68f3878b93897bb28d6926937a8022100b2a920b360008d19833ce3d1c9479c11243d55ec0b2b970c542544b9ef778210:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2019-4061"
}