Lucene search

[email protected]NVD:CVE-2022-38658

HistoryDec 24, 2022 - 12:15 a.m.

CVE-2022-38658

2022-12-2400:15:08

CWE-311

[email protected]

web.nvd.nist.gov

bigfix

windows

smtp

operator data

exposure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.6%

JSON

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator’s sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.

Affected configurations

NVD

Node

hcltechbigfix_server_automationRange≤3.2.1

AND

microsoftwindowsMatch-

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.6%

JSON

Related for NVD:CVE-2022-38658

cvelist1 cve1 prion1