CVE-2021-27762 — Bigfix Platform vulnerability

3 documents3 sources
Severity
9.8CRITICALNVD
CNA4.7
EPSS
0.3%
top 49.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hcltech Bigfix PlatformHCL Software Bigfix Platform
Timeline
PublishedMay 6
Latest updateMay 7

Description

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDhcltech/bigfix_platform9.5 — 9.5.19+1
▶CVEListV5hcl_software/bigfix_platform9.5 - 9.5.18, 10 - 10.0.5

🔴Vulnerability Details

2
GHSA
GHSA-pq7j-j9xf-h9g6: Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses↗2022-05-07
▶
CVEList
HCL BigFix Platform is affected by misconfigured security-related HTTP headers↗2022-05-06
▶
CVE-2021-27762 — Hcltech Bigfix Platform vulnerability | cvebase