CVE-2024-42193 — HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

CVE-2024-42193

HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack PUBLISHED

Description (CNA)

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Platform	affected 10.0 - 10.0.12; 11.0.0 - 11.0.3

CWE

CWE-295

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120585

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.