CVE-2022-42453

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.

Score

CVSS 3.1 6.9 Medium

Status

Modified - psirt@hcl.com

Published

2022-12-19

Last modified

2025-04-17

Weaknesses

CWE-287

Affected products

• Bigfix Platform (Hcl Software)
• Bigfix Platform (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102049