CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
- State
- Published
- Severity
- 4.7 Medium
- Published
- Nov 7, 2024
- Updated
- Nov 7, 2024
- Reserved
- Mar 22, 2024
Description
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.7 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L | HCL |
Weaknesses
- CWE-209 Generation of Error Message Containing Sensitive Information
Affected Products
| Product | Versions |
|---|---|
BigFix ComplianceHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.