2.1
Low
CVE-2024-42193 HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate…
Description
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix Platform | Versions not published |
Other CVEs of HCL BigFix Platform
The 5 CVEs of HCL BigFix Platform →
CVE-2024-42189
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of…
5.6
Medium
CVE-2024-42200
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak…
4.8
Medium
CVE-2023-37520
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,…
7.7
High
CVE-2023-37519
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
7.7
High