medium5.4
CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards.
Impact
HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Compliance | Version 2.0.11 |