PT-2024-23193 · Hcl+1 · Bigfix Platform

Published 2024-10-14 · Updated 2024-10-17 · CVE-2024-30117

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. The issue revolves around the dynamic search mechanism, potentially enabling an attacker to exploit this behavior and replace the intended library file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-30117

Affected Products

Bigfix Platform

References · 8

• https://osv.dev/vulnerability/CVE-2024-30117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30117 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116659 · Vendor Advisory
• https://t.me/cvedetector/7871 · Telegram Post
• https://twitter.com/CVEnew/status/1845966728938877207 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1846027401614053759 · Twitter Post
• https://t.me/cvenotify/98014 · Telegram Post
• https://t.me/cvenotify/98676 · Telegram Post