Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker t

Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attac

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to inform

BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker coul

Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure

Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure.â€