Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.
References
| Link | Resource |
|---|---|
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 | Vendor Advisory |
Configurations
History
03 Jul 2023, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Hcltech bigfix Osd Bare Metal Server
Hcltech |
|
| CPE | cpe:2.3:a:hcltech:bigfix_osd_bare_metal_server:*:*:*:*:*:*:*:* | |
| CWE | CWE-74 |
22 Jun 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-22 23:15
Updated : 2023-07-03 19:17
NVD link : CVE-2023-28016
Mitre link : CVE-2023-28016
JSON object : View
Products Affected
hcltech
- bigfix_osd_bare_metal_server
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')