CVE-2024-23540: medium-severity vulnerability in HCL Software BigFix Inventory
HCL BigFix Inventory is vulnerable to path traversal
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.6%
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
HCL Software · BigFix InventoryRelated CVEs — HCL Software BigFix Inventory
In the same product, most dangerous first.