6.5
Moyenne
CVE-2024-23551 Database scanning using username and password stores the credentials in plaintext or encoded format within files at…
Description
Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe consequences such as data breaches, unauthorized data manipulation, and compromised system integrity.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Compliance | Versions non publiées | |
| bigfix_compliance 11.0 | 11.0.0.175 → 11.0.2.125 | Pas de correctif indiqué |
| bigfix_compliance 10.0 | 10.0.0.133 → 10.0.5.0 | Pas de correctif indiqué |
| bigfix_compliance 9.0 | 9.0.835.0 → 9.5.25.11 | Pas de correctif indiqué |
Autres CVE de BigFix Compliance
Les 6 CVE de BigFix Compliance →
CVE-2024-30142
HCL BigFix Compliance is affected by a missing secure flag on a cookie
3.8
Faible
CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
4.7
Moyenne
CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards
5.4
Moyenne
CVE-2024-30126
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a…
4.7
Moyenne