CVE-2022-27544CWE-522

CVE-2022-27544

Medium · published July 19, 2022

CVSS v3.1
5.0
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

BigFix Web Reports authorized users may see SMTP credentials in clear text.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.5th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-07-19T20:15Z
Affected products (2)
ProductVersionsFixed in
hcltech/bigfix_platform≥ 9.5, ≤ 9.5.19—
hcltech/bigfix_platform≥ 10.0, ≤ 10.0.6—
References (2)
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098998 · [email protected]https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098998 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 JUL 15:40Z
    HCL BigFix Web Reports authorized users may see sensitive information in clear text
    cvelistv5