CVE-2024-30140 — HCL BigFix Compliance is affected by unvalidated redirects and forwards

CVE-2024-30140

HCL BigFix Compliance is affected by unvalidated redirects and forwards PUBLISHED

Description (CNA)

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Compliance	affected 2.0.11

CWE

CWE-601

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.