2.5
Low
CVE-2024-42182 BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability
Description
BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability. It may allow the application to download files from an internally hosted server on localhost.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42187
BigFix Patch Download Plug-ins are affected by path traversal vulnerability
5.3
Medium
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support
2.8
Low
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
2.5
Low
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
2.5
Low