Vulnerability · Published Oct 14, 2024 · Assigned by HCL
CVE-2024-30117HCL BigFix Platform is affected by a DLL Hijack vulnerability
Low 2.5
In plain English
A low-severity uncontrolled search path in BigFix Platform from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)2.5Low
Exploit odds (30 days)0.2%top 90.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | BigFix Platform | 9.5 - 9.5.24, 10.0 - 10.0.11, 11.0.0 - 11.0.2 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L