CVE-2024-23554 Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution…

Description

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).

Affected products and versions

Product	Affected versions	Fixed in
BigFix Platform	Versions not published
bigfix_platform	11.0.1	No fix stated

Other CVEs of BigFix Platform

The 22 CVEs of BigFix Platform →

CVE-2026-108013 BigFix Platform uses Mozilla CA certificate bundle (PEM) 6.8 Medium CVE-2024-30117 A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file… 2.5 Low CVE-2024-23556 SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability 5.9 Medium CVE-2024-23583 An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client… 6.7 Medium