CVE-2023-37522: HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags
Published Jan 16, 2024
·Updated
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser.
Affected Software
1 affected component
Hcltechsw Bigfix Bare Osd Metal Server Webui<311.28
Event History
Jan 16, 2024
CVE Published
via MITRE·03:59 PM
Data Sourced
via MITRE·03:59 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-37522?
CVE-2023-37522 has a medium severity rating due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2023-37522?
To fix CVE-2023-37522, upgrade HCL BigFix Bare OSD Metal Server WebUI to version 311.28 or later.
3
What are the risks associated with CVE-2023-37522?
The risks associated with CVE-2023-37522 include unauthorized script execution that can compromise user sessions.
4
What versions of HCL BigFix Bare OSD Metal Server WebUI are affected by CVE-2023-37522?
Versions 311.19 and lower of HCL BigFix Bare OSD Metal Server WebUI are affected by CVE-2023-37522.
5
Is there a workaround for CVE-2023-37522?
There is no official workaround for CVE-2023-37522; upgrading to a secure version is the recommended action.