← Back

CVE-2023-28023

nvd nist
Published: Jul 18, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network). 

Affected (1)

Hcltech
1 product
Bigfix Webui
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bigfix Webui
Up to 44

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

Source: psirt@hcl.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.