Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2022-42451

HCL BigFix Patch Management is vulnerable to insecurely stored credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Patch Management

Default version status: unaffected

  • site version 1054 and belowaffected

References