Lucene search
HistoryOct 11, 2023 - 7:15 a.m.
CVE-2022-44758
bigfix insights
ivr fixlet
improper credential handling
attacker access
unauthorized information
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.8 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.
Affected configurations
Node
hcltechbigfix_insights_for_vulnerability_remediationRange<2.0.3
Related
prion
prion
Input validation
2023-10-11 07:15:00
cve
cve
CVE-2022-44758
2023-10-11 07:15:09
cvelist
cvelist
gentoo
gentoo
Heimdal: Multiple Vulnerabilities
2023-10-08 00:00:00
nessus
nessus
GLSA-202310-06 : Heimdal: Multiple Vulnerabilities
2023-10-08 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.8 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2022-44758