CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service
Attackers can read SMTP credentials in clear text if the Notification Service is installed on Windows, exposing operator sensitive data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-38658?
CVE-2022-38658 is a high-severity vulnerability in HCL Software BigFix Server Automation, published on 22 Dec 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.
Weakness: CWE-311
Which versions are affected by CVE-2022-38658?
It affects 1 product.
Products include Hcltech Bigfix Server Automation.
How do I fix CVE-2022-38658?
No fix has been published for CVE-2022-38658 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-38658 being exploited?
There is no known exploitation of CVE-2022-38658 in the wild and no public exploit code.
Sources
Also known as GHSA-4vwj-7pm2-257c.