HCL AppScan Source <= 10.6 Improper Certificate Validation (CVE-2024-30149)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(300254);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/03");

  script_cve_id("CVE-2024-30149");
  script_xref(name:"IAVB", value:"2024-B-0166");

  script_name(english:"HCL AppScan Source <= 10.6 Improper Certificate Validation (CVE-2024-30149)");

  script_set_attribute(attribute:"synopsis", value:
"An application installed on the remote Windows host is affected by an improper certificate validation vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of HCL AppScan Source installed on the remote Windows host is 10.6.0 or earlier. It is, therefore,
affected by an improper certificate validation vulnerability. HCL AppScan Source does not properly validate a
TLS/SSL certificate for an executable, which could allow an attacker to perform a man-in-the-middle attack to
intercept or modify traffic.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116990
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8310d7d2");
  script_set_attribute(attribute:"solution", value:
"Upgrade to HCL AppScan Source version 10.7.0 or later.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-30149");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/10/31");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/10/31");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/03/02");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:hcltech:appscan_source");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("hcl_appscan_source_win_installed.nbin");
  script_require_keys("installed_sw/HCL AppScan Source");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [{'scope': 'target', 'match': {'os': 'windows'}}],
  'checks': [
    {
      'product': {'name': 'HCL AppScan Source', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '10.7.0'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:result);