CVE-2023-28016

Name of the Vulnerable Software and Affected Versions HCL BigFix OSD Bare Metal Server versions 311.12 or lower

Description The issue allows an attacker to supply invalid input, causing the server to perform a redirect to an attacker-controlled domain. This is achieved through a Host Header Injection.

Recommendations For HCL BigFix OSD Bare Metal Server versions 311.12 or lower, update to a version higher than 311.12 to resolve the issue. As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation.