CVE-2023-37527

概要

参考情報

• support.hcltechsw.com/csm · Vendor Advisory

bigfix platform のその他の脆弱性

• CVE-2026-21767低 3.3HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the applicat…
• CVE-2026-21765高 7.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows …
• CVE-2024-42193高 8.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario…
• CVE-2024-42200中 5.4HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
• CVE-2024-42189中 6.5HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.