CVE-2024-42213: hcl software hcl bigfix compliance

Vulnerability summary

CVE-2024-42213 is a medium (CVSS 5.3) vulnerability in hcl software hcl bigfix compliance. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.2% of scored vulnerabilities.

Timeline

1. 05-05-2025
   PublishedVulnerability first disclosed.
2. 05-05-2025
   Last modifiedVulnerability information updated.

Description

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure.

• CWE-531Inclusion of Sensitive Information in Test CodeAccessible test applications can pose a variety of security risks. Since developers or administrators rarely consider that someone besides themselves would even know about the existence of these applications, it is common for them to contain sensitive information or functions.