CVE-2024-42193CWE-295

HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

Low · published April 15, 2025

CVSS v4.0
2.1
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00275 · 18.9th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-04-15T18:16Z
EPSS history
Timeline
  • 15 APR 18:16Z
    HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
    cvelistv5