2.5
Low
CVE-2024-42183 BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
Description
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42187
BigFix Patch Download Plug-ins are affected by path traversal vulnerability
5.3
Medium
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support
2.8
Low
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
2.5
Low
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
2.5
Low