CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44757 – HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
https://notcve.org/view.php?id=CVE-2022-44757
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc. BigFix Insights for Vulnerability Remediation (IVR) utiliza criptografía débil que puede provocar la exposición de las credenciales. Un atacante podría obtener acceso a información confidencial, modificar datos de formas inesperadas, etc. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108005 • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44758 – HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling
https://notcve.org/view.php?id=CVE-2022-44758
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized. El fixlet de BigFix Insights/IVR utiliza un manejo de credenciales inadecuado dentro de determinado contenido del fixlet. Un atacante puede obtener acceso a información que no está explícitamente autorizada. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108005 • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44756 – HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation
https://notcve.org/view.php?id=CVE-2022-44756
Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access. Insights for Vulnerability Remediation (IVR) es vulnerable a una validación de entrada incorrecta. Esto puede dar lugar a la divulgación de información. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102168 • CWE-20: Improper Input Validation •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-42454 – HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation
https://notcve.org/view.php?id=CVE-2022-42454
Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access. Insights for Vulnerability Remediation (IVR) es vulnerable a ataques man in the middle que pueden conducir a la divulgación de información. Esto requiere acceso privilegiado a la red. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102168 •