CVE-2024-42193HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

Beschreibung

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120585 Vendor Advisory