Hcltech: >> Bigfix Webui >> 20 Security Vulnerabilities
A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).
CVSS Score
4.9
EPSS Score
0.001
Published
2023-07-18
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site.
CVSS Score
6.4
EPSS Score
0.001
Published
2022-12-21