CVE-2024-30140

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

bigfix compliance のその他の脆弱性

• CVE-2023-37525中 5.3A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may …
• CVE-2024-42213中 5.3HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to thes…
• CVE-2024-42212中 5.4HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks,…
• CVE-2024-30142低 3.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker u…
• CVE-2024-30141中 4.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provi…