CVE-2022-42453

🗓️ 17 Dec 2022 19:03:24Reported by HCLType

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-42453	19 Dec 202214:25	–	circl
CNNVD	HCL Technologies HCL BigFix Platform 授权问题漏洞	19 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-42453 HCL BigFix Platform is affected by insufficient warnings	17 Dec 202219:03	–	cvelist
EUVD	EUVD-2022-45526	3 Oct 202520:07	–	euvd
NVD	CVE-2022-42453	19 Dec 202211:15	–	nvd
Prion	Authorization	19 Dec 202211:15	–	prion
Positive Technologies	PT-2022-26438 · Hcl +1 · Bigfix Platform	17 Dec 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-42453 HCL BigFix Platform is affected by insufficient warnings	17 Dec 202219:03	–	vulnrichment

NVD

Node

hcltech bigfix_platformRange9.5.0–9.5.21

hcltech bigfix_platformRange10.0.0–10.0.8

[
  {
    "defaultStatus": "unaffected",
    "product": "BigFix Platform",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "9.5 - 9.5.20, 10 - 10.0.7"
      }
    ]
  }
]

Source	Link
support	www.support.hcltechsw.com/csm

17 Apr 2025 15:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5 - 6.9

EPSS0.00103

SSVC

CWE-287