Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2022-38655

HCL BigFix WebUI is affected by a missing-permission-check vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix WebUI

Default version status: unaffected

  • 20affected

References