CVE-2024-30141: fallo de gravedad media en HCL Software BigFix Compliance
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.7epss 0.3%
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
Productos afectados
HCL Software · BigFix ComplianceCVEs relacionadas — HCL Software BigFix Compliance
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-30140MEDIUMHCL BigFix Compliance is affected by unvalidated redirects and forwardsEPSS 0.3%CVE-2024-30126MEDIUMHCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerabilityEPSS 0.2%CVE-2024-23551MEDIUMHCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpointEPSS 0.2%CVE-2024-30125MEDIUMHCL BigFix Compliance is affected by an internal server errorEPSS 0.1%CVE-2024-30142LOWHCL BigFix Compliance is affected by a missing secure flag on a cookieEPSS 0.1%