5.3
Medium
CVE-2024-42187 BigFix Patch Download Plug-ins are affected by path traversal vulnerability
Description
BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from a local repository which is vulnerable to path traversal attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support
2.8
Low
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
2.5
Low
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
2.5
Low
CVE-2024-42183
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
2.5
Low