2.5
Low
CVE-2024-42184 BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
Description
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to download files using the file:// URI scheme.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42187
BigFix Patch Download Plug-ins are affected by path traversal vulnerability
5.3
Medium
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support
2.8
Low
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
2.5
Low
CVE-2024-42183
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
2.5
Low