CVE-2023-28023

HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability

Medium · published July 18, 2023

CVSS v3.1
4.9
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Published
2023-07-18T19:07Z
EPSS history
Timeline
  • 18 JUL 19:07Z
    HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
    cvelistv5