CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Analyzed - psirt@hcl.com
- Published
- 2024-11-07
- Last modified
- 2024-11-07
- Weaknesses
- CWE-601
Affected products
References
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197
