CVE-2024-30141CWE-209

HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information

Medium · published November 7, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2024-11-07T08:36Z
EPSS history
Timeline
  • 07 NOV 08:36Z
    HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
    cvelistv5