Description
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix Insights for Vulnerability Remediation | <=2.0.2 | — |
Advisories 1
- WID-SEC-2023-2797 HCL BigFix: Mehrere Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Oct 31, 2023