Lucene search
HCLVULNRICHMENT:CVE-2023-45715HistoryMar 28, 2024 - 2:26 p.m.
CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack
2024-03-2814:26:32
HCL
github.com
3
hcl bigfix
denial of service
service interruption
file names
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
AI Score
7.1
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
The console may experience a service interruption when processing file names with invalid characters.
CNA Affected
[
{
"vendor": "HCL Software",
"product": "BigFix Platform",
"versions": [
{
"status": "affected",
"version": "9.5 - 9.5.23, 10.0 - 10.0.10, 11.0.0 - 11.0.1"
}
],
"defaultStatus": "unaffected"
}
]
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
AI Score
7.1
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-45715