Description
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix Compliance | 2.0.x | — |
Advisories 1
- WID-SEC-2024-1679 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2024