5.4
Medium
CVE-2024-30140 HCL BigFix Compliance is affected by unvalidated redirects and forwards
Description
HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Compliance | 2.0.11 | No fix stated |
Other CVEs of BigFix Compliance
The 6 CVEs of BigFix Compliance →
CVE-2024-30142
HCL BigFix Compliance is affected by a missing secure flag on a cookie
3.8
Low
CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
4.7
Medium
CVE-2024-30126
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a…
4.7
Medium
CVE-2024-30125
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the…
6.2
Medium