CVE-2024-42212

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

bigfix compliance のその他の脆弱性

• CVE-2023-37525中 5.3A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may …
• CVE-2024-42213中 5.3HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to thes…
• CVE-2024-30142低 3.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker u…
• CVE-2024-30141中 4.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provi…
• CVE-2024-30140中 5.4HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result,…