CVE Vulnerabilities

CVE-2022-44758

Insufficiently Protected Credentials

Published: Oct 11, 2023 | Modified: Oct 23, 2023
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Bigfix_insights_for_vulnerability_remediation Hcltech * 2.0.3 (excluding)

Potential Mitigations

References