| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix compliance | = 2.0.9 |
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free