Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gj5-whmr-7g98

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.

EPSS

Процентиль: 59%
0.00384
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.3
nvd
почти 2 года назад

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.

EPSS

Процентиль: 59%
0.00384
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22