CVE-2024-42194 Information

Description

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.

Reference

https://https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118212