CVE-2022-42453

HCL BigFix Platform is affected by insufficient warnings

Medium · published December 17, 2022

CVSS v3.1
6.9
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Published
2022-12-17T19:03Z
EPSS history
Timeline
  • 17 DEC 19:03Z
    HCL BigFix Platform is affected by insufficient warnings
    cvelistv5