What is CVE-2024-30117?

CVE-2024-30117 is a low-severity vulnerability in Hcl Software Bigfix Platform, classified under Uncontrolled Search Path Element. CVSS score: 2.5/10. Published 2024-10-14.

How severe is CVE-2024-30117?

Low severity. CVSS v3 base score is 2.5 out of 10.

Vulnerability in Hcl Software Bigfix Platform

CVE-2024-30117

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L.

Affected products

Hcl Software Bigfix Platform — versions 9.5 - 9.5.24, 10.0 - 10.0.11, 11.0.0 - 11.0.2
Hcltech Bigfix_platform

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-30117?: CVE-2024-30117 is a low-severity vulnerability in Hcl Software Bigfix Platform, classified under Uncontrolled Search Path Element. CVSS score: 2.5/10. Published 2024-10-14.
How severe is CVE-2024-30117?: Low severity. CVSS v3 base score is 2.5 out of 10.