CVE-2023-37525 — HCL BigFix Compliance is vulnerable to a sensitive information disclosure

CVE-2023-37525

HCL BigFix Compliance is vulnerable to a sensitive information disclosure PUBLISHED

Description (CNA)

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / BigFix Compliance	affected 2.0.9

CWE

CWE-497

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128385

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.