| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix insights for vulnerability remediation | = 4.2 |
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free