CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances...

HCL BigFix Platform 安全漏洞

HCL BigFix Platform is a suite of endpoint security management platforms from HCL Corporation, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that stems from the fact that a dynamic...

The vulnerability of the NMAP import service used in the HCL BigFix Enterprise Suite Asset Discovery tool allows a hacker to increase their privileges.

The vulnerability of the NMAP import service used in the HCL BigFix Enterprise Suite Asset Discovery tool is due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

IBM BigFix Relay Server Sites and Package Enum

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM BigFix Relay Server Sites and Package Enum', 'Description' = %q This module retrieves masthead, site, and available package information from...

CVE-2024-30126

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

CVE-2024-30126

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

CVE-2024-30126

CVE-2024-30126 affects HCL BigFix Compliance due to a missing X-Frame-Options HTTP header. The issue enables an attacker to host the target site in a frame/iframe, potentially tricking users into performing actions without their knowledge. Documented impact is limited to framing-related risks; no...

CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

CVE-2024-30125

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die...

CVE-2024-30125

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die...

CVE-2024-30125 HCL BigFix Compliance is affected by an internal server error

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die...

CVE-2024-30125 HCL BigFix Compliance is affected by an internal server error

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die...

CVE-2024-30125

CVE-2024-30125 affects HCL BigFix Compliance server. The issue is described as the server returning HTTP 500, potentially causing the server process to die. The CVSS 3.1 base score is 6.2 (Medium): Local attack vector, no user interaction, with Confidentiality Low, Integrity High, Availability Lo...

PT-2024-23199 · Hcl · Hcl Bigfix Compliance Server

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance server affected versions not specified Description: The HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die. Recommendations: At th...

HCL BigFix Platform 安全漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from the SSL/TL...

HCL BigFix Platform 安全漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from the presen...

CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability...

CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability...

CVE-2024-23554 HCL BigFix Platform is susceptible to Cross-Site Request Forgery

Cross-Site Request Forgery CSRF on Session Token vulnerability that could potentially lead to Remote Code Execution RCE...