What is CVE-2024-42213?

CVE-2024-42213 is a medium-severity vulnerability in Hcl Software Bigfix Compliance, classified under CWE-531. CVSS score: 5.3/10. Published 2025-05-05.

How severe is CVE-2024-42213?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Hcl Software Bigfix Compliance

CVE-2024-42213

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to info…

EPSS: 0.003 (16.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hcl Software Bigfix Compliance — versions 2.0.12
Hcltech Bigfix_compliance — versions 2.0.12

Weakness classification (CWE)

CWE-531

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-42213?: CVE-2024-42213 is a medium-severity vulnerability in Hcl Software Bigfix Compliance, classified under CWE-531. CVSS score: 5.3/10. Published 2025-05-05.
How severe is CVE-2024-42213?: Medium severity. CVSS v3 base score is 5.3 out of 10.