« Volver al listado

CVE-2024-23583

Estado: AnalizadaMedia (6.7)—

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — Bigfix Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-23583",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-23583",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-18T16:17:16.687390Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@hcl.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "HCL Software",
          "product": "BigFix Platform",
          "versions": [
            {
              "status": "affected",
              "version": "9.5 - 9.5.24, 10 - 10.0.11, 11.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:hcltech:bigfix_platform:9.5:*:*:*:*:*:*:*"
          ],
          "vendor": "hcltech",
          "product": "bigfix_platform",
          "versions": [
            {
              "status": "affected",
              "version": "9.5",
              "versionType": "custom",
              "lessThanOrEqual": "9.5.24"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:hcltech:bigfix_platform:10.0.0:*:*:*:*:*:*:*"
          ],
          "vendor": "hcltech",
          "product": "bigfix_platform",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom",
              "lessThanOrEqual": "10.0.11"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:hcltech:bigfix_platform:11.0.1:*:*:*:*:*:*:*"
          ],
          "vendor": "hcltech",
          "product": "bigfix_platform",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-05-17T23:15:06.523",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@hcl.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. \n"
    },
    {
      "lang": "es",
      "value": " Un atacante podría potencialmente interceptar las credenciales a través del administrador de tareas y realizar acceso no autorizado a Client Deploy Tool en sistemas Windows."
    }
  ],
  "lastModified": "2026-06-17T07:13:10.807",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89381821-8CEB-4749-BDF3-96ACAE9030BE",
              "versionEndExcluding": "9.5.25",
              "versionStartIncluding": "9.5"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8384CC0-439E-4627-A8CB-83612ECD933D",
              "versionEndExcluding": "10.0.12",
              "versionStartIncluding": "10"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:bigfix_platform:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FF4B799-AA71-4FB2-BF63-2C5D9BE02AD8"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}