DeutschShown in its original language — a full translation is planned for a future version.
HCL BigFix: Mehrere Schwachstellen
view advisory published 2024-05-20
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-23556US | high7.5 | — | ||
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
| ||||
| CVE-2024-23554US | high8.8 | — | ||
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).
| ||||
| CVE-2024-23583US | — | — | ||
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
| ||||
| CVE-2024-0853US | medium5.3 | — | ||
curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) test failed. A subsequent transfer to
the same hostname could… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan