CVE-2024-30141
Last modified
CVE-2024-30141 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hcltech | Bigfix Compliance | 2.0.11 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-30141?
How severe is CVE-2024-30141?
How do I fix CVE-2024-30141?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-30132HCL Nomad server on Domino did not configure certain HTTP Se…7.5
- CVE-2024-30133HCL Traveler for Microsoft Outlook (HTMO) is susceptible to …5.3
- CVE-2024-30134The HCL Traveler for Microsoft Outlook executable (HTMO.exe)…7.5
- CVE-2024-30135HCL DRYiCE AEX is potentially impacted by disclosure of sens…7.5
- CVE-2024-3014A vulnerability classified as critical has been found in Sou…8.8
- CVE-2024-30140HCL BigFix Compliance is affected by unvalidated redirects a…5.4
- CVE-2024-30142HCL BigFix Compliance is affected by a missing secure flag o…3.8
- CVE-2024-30143HCL AppScan Traffic Recorder fails to adequately neutralize …4.3
- CVE-2024-30145Multiple vectors in HCL Domino Volt and Domino Leap allow cl…6.1
- CVE-2024-30146Improper access control of endpoint in HCL Domino Leap allow…2.7
- CVE-2024-30147Multiple vectors in HCL Leap allow client-side script inject…6.1
- CVE-2024-30148Improper access control of endpoint in HCL Leap allows certa…4.1
Are you affected by CVE-2024-30141?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST