CVE-2024-30126
Medium
Description
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
SeverityMedium
CVSS4.7
Exploit probability—
ProductHcltech Bigfix Compliance
PublishedJul 18, 2024
First seenJul 18, 2024
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- hcltech bigfix_compliance2.0.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hcltech bigfix_compliance | v < 2.0.11 | 2.0.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.