PT-2023-21487 · Ibm · Bigfix Webui

Published 2023-07-18 · Updated 2023-07-27 · CVE-2023-28021

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BigFix WebUI (affected versions not specified)

Description The issue concerns the use of weak cipher suites by the BigFix WebUI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2023-28021

Affected Products

Bigfix Webui

References · 3

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28021 · Security Note
• https://t.me/cibsecurity/66952 · Telegram Post