PT-2024-23211
CVE-2024-30141
·
تاريخ النشر
2024-11-07
·
تاريخ التحديث
2024-11-08
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
HCL BigFix Compliance version 2.0.11
Description
The issue concerns the generation of error messages that contain sensitive information. Detailed error messages can provide enticing information or expose details about the environment, users, or associated data. The problem is remotely exploitable.
Recommendations
For HCL BigFix Compliance version 2.0.11, update the system to a patched version as soon as possible to limit the risk of exploitation. As a temporary workaround, consider restricting access to detailed error messages to minimize the risk of sensitive information exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾