6.4
Medium
CVE-2022-42454 Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information…
Description
Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Insights for Vulnerability Remediation 2.0 | earliest → 2.0 | No fix stated |
Other CVEs of BigFix Insights for Vulnerability Remediation
The 4 CVEs of BigFix Insights for Vulnerability Remediation →
CVE-2022-44757
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure
6.5
Medium
CVE-2022-44758
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content
6.5
Medium
CVE-2022-44756
Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation
6.4
Medium