CVE-2022-38658 — HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

CVE-2022-38658

HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service PUBLISHED

Description (CNA)

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Server Automation	affected <=3.2.1

CWE

No CWE identifiers supplied.

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117

ADP enrichment

CVE

No English description supplied.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117

CISA-ADP

No English description supplied.

No references supplied.