2.8
Low
CVE-2024-42186 BigFix Patch Download Plug-ins are affected by an insecure protocol support
Description
BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42187
BigFix Patch Download Plug-ins are affected by path traversal vulnerability
5.3
Medium
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
2.5
Low
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
2.5
Low
CVE-2024-42183
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
2.5
Low