CVE-2023-28016

HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability

State: Published
Severity: 3.1 Low
Published: Jun 22, 2023
Updated: Dec 5, 2024
Reserved: Mar 10, 2023

Description

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.

Scores

CVSS	Score	Vector	Source
3.1	3.1 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L	HCL

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
HCL BigFix OSD Bare Metal ServerHCL Software	< 311.12Affected

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.