CVE-2022-44757: falha de média gravidade em HCL Software BigFix Insights for Vulnerability…
HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.4%
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
HCL Software · BigFix Insights for Vulnerability RemediationCVEs relacionadas — HCL Software BigFix Insights for Vulnerability…
No mesmo produto, das mais perigosas para as menos.
CVE-2022-44756MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validationEPSS 0.4%CVE-2022-44758MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handlingEPSS 0.4%CVE-2022-42454MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validationEPSS 0.2%