Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2024-42194

HCL BigFix Inventory is affected by an access control vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Inventory

Default version status: unaffected

  • v9.x, v10.x, v11.0.0.0, v11.0.1.0affected

References