CVE-2024-23583CWE-522

HCL BigFix Platform is susceptible to insufficiently protected credentials

Medium · published May 17, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.4th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-05-17T23:06Z
EPSS history
Timeline
  • 17 MAY 23:06Z
    HCL BigFix Platform is susceptible to insufficiently protected credentials
    cvelistv5