Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-42187

HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability

Description

BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from a local repository which is vulnerable to path traversal attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Patch Management Download Plug-ins

Default version status: unaffected

  • 1177 and belowaffected

References