← Database

CVE-2024-42194

LOW CVSS: 3.1 Published: 2024-12-17 Modified: 2026-06-17

Description

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Affected Platforms

Unknown

Weakness Type

CWE-280

References