1. Home
  2. CVE Database
  3. CVE-2023-28023
MEDIUM · 4.9

CVE-2023-28023

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine ...

Vulnerability Description

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network). 

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HcltechBigfix Webui<= 44

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2023-28023?

CVE-2023-28023 is a vulnerability with a CVSS score of 4.9 (MEDIUM). A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine ...

How severe is CVE-2023-28023?

CVE-2023-28023 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28023?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Bigfix Webui.