What’s Vulnerable › Vulnerabilities
CVE-2024-42213: HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-05-05 · updated 2026-06-17
- Weakness: CWE-531
Description
HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure.
Affected products
- HCL Software BigFix Compliance: 2.0.12
References
Get alerted when CVE-2024-42213 or the next vulnerability affects your stack