HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197 | Vendor Advisory |
Configurations
History
17 Jun 2025, 21:03
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:bigfix_compliance:2.0.11:*:*:*:*:*:*:* | |
| First Time |
Hcltech
Hcltech bigfix Compliance |
|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197 - Vendor Advisory |
07 Nov 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-07 09:15
Updated : 2025-06-17 21:03
NVD link : CVE-2024-30140
Mitre link : CVE-2024-30140
JSON object : View
Products Affected
hcltech
- bigfix_compliance
CWE
No CWE.