CVE-2024-42194 — HCL BigFix Inventory is affected by an access control vulnerability

CVE-2024-42194

HCL BigFix Inventory is affected by an access control vulnerability PUBLISHED

Description (CNA)

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Inventory	affected v9.x, v10.x, v11.0.0.0, v11.0.1.0

CWE

CWE-280

References

https://https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118212

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.