Vulnerability-Lookup

CNVD-2021-13718

Vulnerability from cnvd - Published: 2021-03-02

Title

HCL BigFix Platform凭证明文存储漏洞

Description

HCL BigFix Platform是印度HCL公司的一套端点安全管理平台。该平台支持自动发现、管理和修复端点安全问题。 HCL BigFix Platform中存在安全漏洞，该漏洞源于程序将凭证以明文形式存储在系统内存中。攻击者可利用该漏洞转储内存并提取凭证。

Severity

低

Patch Name

HCL BigFix Platform凭证明文存储漏洞的补丁

Patch Description

HCL BigFix Platform是印度HCL公司的一套端点安全管理平台。该平台支持自动发现、管理和修复端点安全问题。 HCL BigFix Platform中存在安全漏洞，该漏洞源于程序将凭证以明文形式存储在系统内存中。攻击者可利用该漏洞转储内存并提取凭证。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://support.hcltechsw.com/csm?id=kb_article&sysparm;_article=KB0080772&sys;_kb_id=fb6959291b4ed01c086dcbfc0a4bcb85

Reference

https://support.hcltechsw.com/csm?id=kb_article&sysparm;_article=KB0080772

Impacted products

Name
['HCL BigFix Platform >=9.2，<=9.2.19', 'HCL BigFix Platform >=9.5，<=9.5.15']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-4095",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-4095"
    }
  },
  "description": "HCL BigFix Platform\u662f\u5370\u5ea6HCL\u516c\u53f8\u7684\u4e00\u5957\u7aef\u70b9\u5b89\u5168\u7ba1\u7406\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u652f\u6301\u81ea\u52a8\u53d1\u73b0\u3001\u7ba1\u7406\u548c\u4fee\u590d\u7aef\u70b9\u5b89\u5168\u95ee\u9898\u3002\n\nHCL BigFix Platform\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5c06\u51ed\u8bc1\u4ee5\u660e\u6587\u5f62\u5f0f\u5b58\u50a8\u5728\u7cfb\u7edf\u5185\u5b58\u4e2d\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8f6c\u50a8\u5185\u5b58\u5e76\u63d0\u53d6\u51ed\u8bc1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.hcltechsw.com/csm?id=kb_article\u0026sysparm;_article=KB0080772\u0026sys;_kb_id=fb6959291b4ed01c086dcbfc0a4bcb85",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-13718",
  "openTime": "2021-03-02",
  "patchDescription": "HCL BigFix Platform\u662f\u5370\u5ea6HCL\u516c\u53f8\u7684\u4e00\u5957\u7aef\u70b9\u5b89\u5168\u7ba1\u7406\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u652f\u6301\u81ea\u52a8\u53d1\u73b0\u3001\u7ba1\u7406\u548c\u4fee\u590d\u7aef\u70b9\u5b89\u5168\u95ee\u9898\u3002\r\n\r\nHCL BigFix Platform\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5c06\u51ed\u8bc1\u4ee5\u660e\u6587\u5f62\u5f0f\u5b58\u50a8\u5728\u7cfb\u7edf\u5185\u5b58\u4e2d\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8f6c\u50a8\u5185\u5b58\u5e76\u63d0\u53d6\u51ed\u8bc1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "HCL BigFix Platform\u51ed\u8bc1\u660e\u6587\u5b58\u50a8\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "HCL BigFix Platform \u003e=9.2\uff0c\u003c=9.2.19",
      "HCL BigFix Platform \u003e=9.5\uff0c\u003c=9.5.15"
    ]
  },
  "referenceLink": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm;_article=KB0080772",
  "serverity": "\u4f4e",
  "submitTime": "2020-07-19",
  "title": "HCL BigFix Platform\u51ed\u8bc1\u660e\u6587\u5b58\u50a8\u6f0f\u6d1e"
}

CVE-2020-4095 (GCVE-0-2020-4095)

Vulnerability from cvelistv5 – Published: 2020-07-16 18:27 – Updated: 2024-08-04 07:52

Summary

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the environment. The principle of least privilege should be applied to all BigFix deployments, limiting administrative access."

Severity

No CVSS data available.

CWE

"Clear text credentials"

Assigner

HCL mitre root Scorecard

References

1 reference

URL	Tags
https://support.hcltechsw.com/csm?id=kb_article&s…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	"HCL BigFix Platform"	Affected: "v9.2 - 9.2.19, v9.5 - 9.5.15"

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:52:20.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0080772"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "\"HCL BigFix Platform\"",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "\"v9.2 - 9.2.19, v9.5 - 9.5.15\""
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "\"BigFix Platform is storing clear text credentials within the system\u0027s memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the environment. The principle of least privilege should be applied to all BigFix deployments, limiting administrative access.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "\"Clear text credentials\"",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-16T18:27:41.000Z",
        "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc",
        "shortName": "HCL"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0080772"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@hcl.com",
          "ID": "CVE-2020-4095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "\"HCL BigFix Platform\"",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "\"v9.2 - 9.2.19, v9.5 - 9.5.15\""
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "\"BigFix Platform is storing clear text credentials within the system\u0027s memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the environment. The principle of least privilege should be applied to all BigFix deployments, limiting administrative access.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "\"Clear text credentials\""
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0080772",
              "refsource": "MISC",
              "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0080772"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc",
    "assignerShortName": "HCL",
    "cveId": "CVE-2020-4095",
    "datePublished": "2020-07-16T18:27:41.000Z",
    "dateReserved": "2019-12-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T07:52:20.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-13718

CVE-2020-4095 (GCVE-0-2020-4095)

Tags

Sightings

Nomenclature

Related by attack behaviour