Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9g2x-9v62-m8g9

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.

EPSS

Процентиль: 17%
0.00054
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 5.3
nvd
10 дней назад

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.

EPSS

Процентиль: 17%
0.00054
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-497