CVE-2021-27782 HCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack

HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts...

PT-2023-12120 · Hcl · Hcl Bigfix Mobile / Modern Client Management

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile / Modern Client Management affected versions not specified Description: The issue allows passwords for the Admin and Config UI to be brute-forced. It is recommended that users should be locked out after multiple invalid...

HCL Technologies BigFix Server Automation 安全漏洞

HCL Technologies BigFix Server Automation is an endpoint management system from HCL Technologies, USA. A security vulnerability exists in HCL Technologies BigFix Server Automation that stems from its Notification Service that allows an attacker to gain access to sensitive data of SMTP BigFix...

CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

HCL多款产品 输入验证错误漏洞

HCL BigFix Compliance etc are products of HCL India.HCL BigFix Compliance is HCL BigFix Lifecycle is a single agent, single console technology.HCL BigFix Remediate is an application. An input validation error vulnerability exists in various HCL products.The vulnerability stems from incorrect inpu...

HCL多款产品 安全漏洞

HCL BigFix Compliance etc are products of HCL India.HCL BigFix Compliance is HCL BigFix Lifecycle is a single agent, single console technology.HCL BigFix Remediate is an application. A security vulnerability exists in several HCL products that stems from vulnerability to man-in-the-middle attacks...

CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

CVE-2022-44756 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation

Insights for Vulnerability Remediation IVR is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access...

CVE-2022-44756 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation

Insights for Vulnerability Remediation IVR is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access...

CVE-2022-42454 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

CVE-2022-42454 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

CVE-2022-44753

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...

CVE-2022-44755

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

CVE-2022-44753

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...

CVE-2022-44754

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described i...

CVE-2022-44755

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

CVE-2022-44754

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described i...

CVE-2022-44752

HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...