High severity8.1NVD Advisory· Published Apr 15, 2025· Updated Jun 17, 2026

CVE-2024-42193

Description

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

Affected products

HCLTech/Bigfix Platform
cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*
Range: >=10.0.0,<10.0.13
HCL Software/BigFix Web Reportsllm-create
HCL Software/BigFix Platformcpe-rescue
Range: 10.0 - 10.0.12; 11.0.0 - 11.0.3

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000