HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
CVE-2022-44757

6.5MEDIUM

Key Information:

Vendor

Hcl Software
Status
Bigfix Insights For Vulnerability Remediation
Vendor
CVE Published:
11 October 2023

What is CVE-2022-44757?

BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.

Affected Version(s)

BigFix Insights for Vulnerability Remediation <=2.0.2

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-44757 : HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography