Lucene search
HistoryDec 19, 2022 - 11:15 a.m.
CVE-2022-42453
fixlet import
insufficient warnings
script owner
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
21.0%
There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.
Affected configurations
Node
hcltechbigfix_platformRange9.5.0–9.5.21
ORhcltechbigfix_platformRange10.0.0–10.0.8
Related
cve
cve
CVE-2022-42453
2022-12-19 11:15:10
cvelist
cvelist
CVE-2022-42453 HCL BigFix Platform is affected by insufficient warnings
2022-12-17 19:03:24
prion
prion
Authorization
2022-12-19 11:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
21.0%
Related for NVD:CVE-2022-42453