Description
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix Inventory | v9.x, v10.x, v11.0.0.0, v11.0.1.0 | — |
Advisories 1
- WID-SEC-2024-3720 HCL BigFix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Dec 17, 2024