CVE-2023-28020 URL redirection affects BigFix WebUI

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-28020 URL redirection affects BigFix WebUI

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-28020

CVE-2023-28020 concerns a URL redirection in the login page of HCL BigFix WebUI that allows a malicious user to redirect a client browser to an external site via a redirect URL response header. The connected PT-2023-21486 entry explicitly notes the vulnerable software is HCL BigFix WebUI and desc...

HCL BigFix Platform 加密问题漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix WebUI that stems from the use ...

HCL Verse 跨站请求伪造漏洞

HCL Technologies HCL Verse is a mobile application for accessing emails and life plan management from HCL Technologies, USA. HCL Verse suffers from a cross-site request forgery vulnerability that stems from stored cross-site scripting...

PT-2023-21486 · Hcl · Hcl Bigfix Webui

Name of the Vulnerable Software and Affected Versions: HCL BigFix WebUI affected versions not specified Description: The issue allows a malicious user to redirect the client browser to an external site via a redirect URL response header in the login page. Recommendations: At the moment, there is ...

CVE-2023-28020: URL Redirection to Untrusted Site

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-23348

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

CVE-2023-23348

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

Design/Logic Flaw

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

CVE-2023-23348

Technical details describing affected component, versions, root cause, and exploit status are not publicly available in the provided documents. Monitor for updates from sources like NVD, CVE lists, and vendor advisories before assessing risk or remediation.

CVE-2023-23348 HCL Launch is vulnerable to sensitive information disclosure

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

CVE-2023-23348 HCL Launch is vulnerable to sensitive information disclosure

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. HCL Launch has a security vulnerability that stems from the possibility of disclosing sensitive...

CVE-2023-23348: Insecure Storage of Sensitive Information

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

PT-2023-18920 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in HCL Launch if a manual edit of a configuration file has been performed. Recommendations: At the moment, there is n...

CVE-2023-23344 HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization

A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page...

CVE-2023-23344 HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization

A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page...

HCL Technologies BigFix Insights 安全漏洞

HCL Technologies BigFix Insights is HCL Technologies' accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. A security vulnerability exists in HCL Technologies BigFix Insights...

CVE-2023-28016

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...