CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
Severity Score
4.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.
HCL BigFix Compliance es vulnerable a la generación de mensajes de error que contienen información confidencial. Los mensajes de error detallados pueden proporcionar información incitativa o exponer información sobre su entorno, usuarios o datos asociados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-03-22 CVE Reserved
- 2024-11-07 CVE Published
- 2024-11-07 CVE Updated
- 2024-11-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-209: Generation of Error Message Containing Sensitive Information
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| HCL Software Search vendor "HCL Software" | BigFix Compliance Search vendor "HCL Software" for product "BigFix Compliance" | 2.0.11 Search vendor "HCL Software" for product "BigFix Compliance" and version "2.0.11" | en |
Affected
| ||||||