Clear Text Credentials Vulnerability in BigFix Platform by HCL Technologies

CVE-2020-4095

What is CVE-2020-4095?

The BigFix Platform is susceptible to a vulnerability where it stores clear text credentials in memory. If an attacker gains administrative privileges, they can execute a program to create a memory dump, enabling them to extract sensitive credentials. This extracted information can facilitate further unauthorized access into the system. It is crucial to enforce the principle of least privilege across all BigFix deployments to minimize administrative access and mitigate potential security risks.

References