CVE-2024-42194

LOW Year: 2024
CVSS v3 Score
3.1
Low
Weakness Type
CWE-280
View all →

Vulnerability Description

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Related Vulnerabilities

CVE-2022-39872

LOW
CVSS:3.3(Low)

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device.

CWE-2802022

CVE-2022-39885

LOW
CVSS:3.3(Low)

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.

CWE-2802022

CVE-2022-39886

LOW
CVSS:3.3(Low)

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.

CWE-2802022

CVE-2022-39912

LOW
CVSS:3.3(Low)

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder.

CWE-2802022

CVE-2024-29852

LOW
CVSS:2.7(Low)

Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.

CWE-2802024

CVE-2024-32882

LOW
CVSS:2.7(Low)

Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the `wagtail.contrib.settings` module or `ModelViewSet`...

CWE-2802024