What is CVE-2022-44757?

CVE-2022-44757 is a medium-severity vulnerability in Hcl Software Bigfix Insights For Vulnerability Remediation, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2023-10-11.

How severe is CVE-2022-44757?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Hcl Software Bigfix Insights For Vulnerability Remediation

CVE-2022-44757

BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.

EPSS: 0.003 (25.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Hcl Software Bigfix Insights For Vulnerability Remediation — versions <=2.0.2
Hcltech Bigfix_insights_for_vulnerability_remediation

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-44757?: CVE-2022-44757 is a medium-severity vulnerability in Hcl Software Bigfix Insights For Vulnerability Remediation, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2023-10-11.
How severe is CVE-2022-44757?: Medium severity. CVSS v3 base score is 6.5 out of 10.