CVE-2024-42194
HCL BigFix Inventory is affected by an access control vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
HCL BigFix Inventory is affected by an access control vulnerability
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.
Reserved 2024-07-29 | Published 2024-12-17 | Updated 2024-12-17 | Assigner HCLCWE-280 Improper Handling of Insufficient Permissions or Privileges
https/...are.com/csm?id=kb_article&sysparm_article=KB0118212
Support options
