Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.
References
| Link | Resource |
|---|---|
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 | Vendor Advisory |
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 | Vendor Advisory |
Configurations
History
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.1 |
| References | () https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 - Vendor Advisory |
03 Jul 2023, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| References | (MISC) https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601 - Vendor Advisory | |
| First Time |
Hcltech
Hcltech bigfix Osd Bare Metal Server |
|
| CWE | CWE-74 | |
| CPE | cpe:2.3:a:hcltech:bigfix_osd_bare_metal_server:*:*:*:*:*:*:*:* |
22 Jun 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-22 23:15
Updated : 2024-11-21 07:53
NVD link : CVE-2023-28016
Mitre link : CVE-2023-28016
CVE.ORG link : CVE-2023-28016
JSON object : View
Products Affected
hcltech
- bigfix_osd_bare_metal_server
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')