Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2022-38658

HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Server Automation

Default version status: unaffected

  • <=3.2.1affected

References