Skip to content
OpenAdvisories
Medium WID-SEC-2023-2797 2 CVEs

HCL BigFix: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Oct 31, 2023 · Updated Oct 31, 2023 · de-DE

Vendor: HCL Software Product: BigFix IVR < 2.0.3

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Dateien zu manipulieren.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 2

  • Medium 6.5
    CVE-2022-44757

    HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography

    BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.

    HCL Software BigFix Insights for Vulnerability Remediation
  • Medium 6.5
    CVE-2022-44758

    HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling

    BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.

    HCL Software BigFix Insights for Vulnerability Remediation

Revision history

  1. #1

    Initiale Fassung

References