Unrated severityNVD Advisory· Published Apr 15, 2025· Updated Apr 15, 2025
HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
CVE-2024-42193
Description
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
Affected products
2- Range: 10.0 - 10.0.12; 11.0.0 - 11.0.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.