CVE-2024-42194

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Una gestión inadecuada de permisos o privilegios insuficientes afecta a HCL BigFix Inventory. Un atacante que tenga acceso a través de una cuenta de solo lectura podría cambiar ciertos parámetros de configuración manipulando una llamada a la API REST específica.