What is CVE-2024-42183?

CVE-2024-42183 is a low-severity vulnerability in Hcl Software Bigfix Patch Management Download Plug-Ins, classified under Download of Code Without Integrity Check. CVSS score: 2.5/10. Published 2025-01-23.

How severe is CVE-2024-42183?

Low severity. CVSS v3 base score is 2.5 out of 10.

Vulnerability in Hcl Software Bigfix Patch Management Download Plug-Ins

CVE-2024-42183

BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls.

EPSS: 0.001 (0.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N.

Affected products

Hcl Software Bigfix Patch Management Download Plug-ins — versions 1177 and below

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

psirt@hcl.com

Frequently asked questions

What is CVE-2024-42183?: CVE-2024-42183 is a low-severity vulnerability in Hcl Software Bigfix Patch Management Download Plug-Ins, classified under Download of Code Without Integrity Check. CVSS score: 2.5/10. Published 2025-01-23.
How severe is CVE-2024-42183?: Low severity. CVSS v3 base score is 2.5 out of 10.