CVE-2024-30125 MEDIUM

CVE-2024-30125: HCL BigFix Compliance is affected by an internal server error

Vendor Hcl Software
Product BigFix Compliance
Published July 18, 2024
Last update November 12, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

What the vulnerability does

01Description

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die.

Key dates

02Disclosure timeline

July 18, 2024 CVE published
November 12, 2024 Record updated