CVE-2022-38658
HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Dec 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:H
Affected products
HCL Software · BigFix Server AutomationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →