4.9 Medium

CVE-2023-28023 A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and…

Description

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).

Affected products and versions

Product	Affected versions	Fixed in
HCL BigFix WebUI Software Distribution 44	earliest → 44	No fix stated

Do you use HCL BigFix WebUI Software Distribution?

Track this CVE Watch HCL BigFix WebUI Software Distribution Check my SBOMs

www.cveye.io/en/cve/CVE-2023-28023

Timeline

Published July 18, 2023
Last modified October 21, 2024

References

support.hcltechsw.com support.hcltechsw.com

Track this CVE