CVE-2021-27783
Assigner: HCL
Published: 2022-05-19T00:00:00
State: PUBLISHED
affected: product: HCL BigFix Mobile / Modern Client Management
vendor: HCL Software
versions: status: affected
version: 2.0, 2.1
datePublic: 2022-05-19T00:00:00
descriptions: value: User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-311
description: CWE-311 Missing Encryption of Sensitive Data
type: CWE
source: discovery: UNKNOWN
title:  HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
x_generator: engine: Vulnogram 0.0.9