CVE-2024-42189

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

bigfix platform のその他の脆弱性

• CVE-2026-21767低 3.3HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the applicat…
• CVE-2026-21765高 7.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows …
• CVE-2024-42193高 8.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario…
• CVE-2024-42200中 5.4HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
• CVE-2024-30117中 5.3A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances…