What is CVE-2023-28023?

CVE-2023-28023 is a medium-severity vulnerability in Hcl Software Bigfix Webui Distribution, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.9/10. Published 2023-07-18.

How severe is CVE-2023-28023?

Medium severity. CVSS v3 base score is 4.9 out of 10.

CSRF in Hcl Software Bigfix Webui Distribution

CVE-2023-28023

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N.

Affected products

Hcl Software Bigfix Webui Distribution — versions <=44
Hcltech Bigfix_webui

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

psirt@hcl.com

Frequently asked questions

What is CVE-2023-28023?: CVE-2023-28023 is a medium-severity vulnerability in Hcl Software Bigfix Webui Distribution, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.9/10. Published 2023-07-18.
How severe is CVE-2023-28023?: Medium severity. CVSS v3 base score is 4.9 out of 10.