Description
Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL BigFix WebUI API | < 14 | — |
Advisories 1
- WID-SEC-2023-1800 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023