CVE-2022-38655

HCL BigFix WebUI is affected by a missing-permission-check vulnerability

Medium · published December 20, 2022

CVSS v3.1
6.4
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.1th percentile
Published
2022-12-20T04:51Z
EPSS history
Timeline
  • 20 DEC 04:51Z
    HCL BigFix WebUI is affected by a missing-permission-check vulnerability
    cvelistv5