1. Home
  2. CVE Database
  3. CVE-2023-28016
LOW · 3.1

CVE-2023-28016

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to ...

Vulnerability Description

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.

CVSS Score

3.1

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HcltechBigfix Osd Bare Metal Server<= 311.12

Related Weaknesses (CWE)

CWE-74

References

FAQ

What is CVE-2023-28016?

CVE-2023-28016 is a vulnerability with a CVSS score of 3.1 (LOW). Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to ...

How severe is CVE-2023-28016?

CVE-2023-28016 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28016?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Bigfix Osd Bare Metal Server.