CVE-2022-42454: falha de média gravidade em HCL Software BigFix Insights for Vulnerability…
HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.2%
Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
HCL Software · BigFix Insights for Vulnerability RemediationCVEs relacionadas — HCL Software BigFix Insights for Vulnerability…
No mesmo produto, das mais perigosas para as menos.
CVE-2022-44756MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validationEPSS 0.4%CVE-2022-44758MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handlingEPSS 0.4%CVE-2022-44757MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptographyEPSS 0.4%