Lucene search
HistoryOct 11, 2023 - 6:15 a.m.
CVE-2022-42451
bigfix
patch management
credentials
insecure storage
local privileged user
cve-2022-42451
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user.
Affected configurations
Node
hcltechbigfix_patch_managementRange<1055
Related
cvelist
cvelist
prion
prion
Code injection
2023-10-11 06:15:00
cve
cve
CVE-2022-42451
2023-10-11 06:15:09
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2022-42451