Skip to content
OpenAdvisories
Medium WID-SEC-2024-0132 3 CVEs

HCL BigFix: Mehrere Schwachstellen

Published Jan 16, 2024 · Updated Jan 16, 2024 · de-DE

Vendor: HCL Software Product: BigFix Bare OSD Metal Server WebUI < 311.28 Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 3

  • Medium 5.6
    CVE-2023-37522

    HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

    HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser.

    HCL Software HCL BigFix OSD Bare Metal Server WebUI
  • Medium 5.6
    CVE-2023-37523

    HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

    Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser.

    HCL Software HCL BigFix OSD Bare Metal Server WebUI
  • Low 2.3
    CVE-2023-37521

    HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure

    HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack.

    HCL Software HCL BigFix OSD Bare Metal Server WebUI

Revision history

  1. #1

    Initiale Fassung

References