2.1
Faible
CVE-2024-42193 HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate…
Description
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Platform | Versions non publiées |
Autres CVE de HCL BigFix Platform
Les 5 CVE de HCL BigFix Platform →
CVE-2024-42189
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of…
5.6
Moyenne
CVE-2024-42200
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak…
4.8
Moyenne
CVE-2023-37520
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,…
7.7
Élevée
CVE-2023-37519
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
7.7
Élevée