CVE-2024-42213
HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 5, 2025
- Updated
- May 5, 2025
- Reserved
- Jul 29, 2024
Description
HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-531 Inclusion of Sensitive Information in Test Code
Affected Products
| Product | Versions |
|---|---|
HCL BigFix ComplianceHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.