1506 matches found
CVE-2024-23583 HCL BigFix Platform is susceptible to insufficiently protected credentials
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems...
HCL BigFix Platform 安全漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that stems from the...
PT-2024-19936
Name of the Vulnerable Software and Affected Versions HCL BigFix Platform versions prior to 9.5.24 HCL BigFix Platform versions prior to 10.0.11 HCL BigFix Platform versions prior to 11.0.1 Description The issue is related to a Cross-Site Request Forgery CSRF on Session Token vulnerability that...
CVE-2024-23551 HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint
Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...
CVE-2024-23551 HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint
Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...
HCL BigFix Compliance 安全漏洞
HCL Technologies HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings to ensure compliance with regulatory or organizational security policies by HCL Technologies, USA. A security vulnerability exists in HCL BigFix Compliance versions prior to 10.0.5.0,...
PT-2024-19934 · Hcl · Hcl Bigfix Compliance
Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance versions 9.x through 11.x Description: Database scanning using a username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant securit...
CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability
The NMAP Importer service may expose data store credentials to authorized users of the Windows Registry...
CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability
The NMAP Importer service may expose data store credentials to authorized users of the Windows Registry...
HCL Technologies BigFix Enterprise Suite 安全漏洞
HCL Technologies BigFix Enterprise Suite is an enterprise-class endpoint management solution from HCL Technologies, Inc. It is used to help organizations effectively manage their endpoint devices, including desktops, laptops, servers, mobile devices, etc. to ensure security, compliance and...
VulnCheck KEV: CVE-2019-4061
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...
CVE-2024-23540
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...
CVE-2024-23540 HCL BigFix Inventory is vulnerable to path traversal
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...
CVE-2024-23540
CVE-2024-23540 : The HCL BigFix Inventory server is vulnerable to a path traversal flaw that allows an attacker to read internal application files by exploiting improper restrictions on served static files. The vulnerability is mapped to CVSS 3.1: Network, Low attack complexity, Privileges Requir...
CVE-2024-23540 HCL BigFix Inventory is vulnerable to path traversal
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...
PT-2024-19931 · Hcl · Hcl Bigfix Inventory Server
Name of the Vulnerable Software and Affected Versions: HCL BigFix Inventory server affected versions not specified Description: The issue allows an attacker to perform path traversal, enabling them to read internal application files from the server. This is due to the server not properly...
HCL Technologies HCL BigFix Inventory 安全漏洞
HCL Technologies HCL BigFix Inventory is a software inventory from HCL Technologies, USA. Maintaining software audits reduces security risks through software compliance and utilization management. A security vulnerability exists in the HCL BigFix Inventory server that stems from vulnerability to...
ROS-20240329-22
Vulnerability in the Heerces C++ library of the BigFix Platform IT hardware co-management platform is caused by an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, to execute arbitrary code by sending a specially crafted HTTP request...