← Database

CVE-2024-42193

HIGH CVSS: 8.1 Published: 2025-04-15 Modified: 2026-06-17

Description

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

Affected Platforms

Hcltech Bigfix Platform

Weakness Type

CWE-295

References