Skip to content
Sign in
Not rated

CVE-2020-14254 TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2

Description

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

Affected products and versions

Product Affected versions Fixed in
HCL BigFix Inventory Versions not published

Other CVEs of HCL BigFix Inventory

The 2 CVEs of HCL BigFix Inventory →
CVE-2020-14248 BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can… Not rated
Track this CVE