The version of HCL BigFix Server installed on the remote host is 9.5.x prior to 9.5.24, 10.0.x prior to 10.0.10 or 11.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the KB0110209 advisory.

  - Heap-based buffer overflow vulnerability in the SOCKS5 proxy handshake in libcurl and curl.  When curl     is given a hostname to pass along to a SOCKS5 proxy that is greater than 255 bytes in length, it will     switch to local name resolution in order to resolve the address before passing it on to the SOCKS5     proxy. However, due to a bug introduced in 2020, this local name resolution could fail due to a     slow SOCKS5 handshake, causing curl to pass on the hostname greater than 255 bytes in length into the     target buffer, leading to a heap overflow.  The advisory for CVE-2023-38545 gives an example exploitation     scenario of a malicious HTTPS server redirecting to a specially crafted URL. While it might seem that an     attacker would need to influence the slowness of the SOCKS5 handshake, the advisory states that server     latency is likely slow enough to trigger this bug. (CVE-2023-38545)

  - A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can     possibly allow an attack to exploit an application parameter during execution of the Save Report.
    (CVE-2023-37528)

  - A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform     can possibly allow an attacker to execute malicious javascript code in the application session or in     database, via remote injection, while rendering content in a web page. (CVE-2023-37527)

  - A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due     to missing a specific http header attribute. (CVE-2024-23553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

HCL BigFix Server 9.5.x < 9.5.24 / 10.0.x < 10.0.10 / 11.0.x < 11.0.1 Multiple Vulnerabilities (KB0110209)

critical Nessus Plugin ID 190126

Version 1.2

Version 1.1

Version 1.1

Version 1.0

Version 1.2 Feb 9, 2024, 3:00 PM CVSS metrics ("CVSSv2 score" set to 10.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") IAVM reference STIG Severity (set to "I") Plugin Feed: 202402091500
Version 1.1 Feb 8, 2024, 9:33 PM CEA reference Plugin Feed: 202402082133
Version 1.1 Feb 9, 2024, 11:22 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202402091122
Version 1.0 Feb 8, 2024, 12:29 PM New Plugin Feed: 202402081229