CVE-2022-38655 in BigFix WebUI

Sumário

de MITRE • 21/12/2022

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site.

Once again VulDB remains the best source for vulnerability data.

• Responsável: HCL Software
• Reservar: 22/08/2022
• Divulgação: 21/12/2022
• Moderação: aceite
• Entrada: VDB-216483
• CPE: pronto
• CWE: Desconhecido
• CVSS: 5.8 (NVD)
• EPSS: 0.00384
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-38655
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38655
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-38655/