CVE-2024-23583

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
HCL Software	BigFix Platform	9.5 - 9.5.24, 10 - 10.0.11, 11.0.1
hcltech	bigfix_platform	>= 9.5, <= 9.5.24
hcltech	bigfix_platform	>= 10.0.0, <= 10.0.11
hcltech	bigfix_platform	11.0.1

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140Vendor Advisory

Timeline

Published: May 17, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-235846.6The NMAP Importer service may expose data store credentials to authorized users of the Windows Registry.CVE-2024-235867.5HCL Nomad is susceptible to an insufficient session expiration vulnerability. Under certain circumstances, an unauthenticated attacker cou CVE-2024-235886.5HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vu CVE-2024-235896.8Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks effi CVE-2024-23599.8A vulnerability in the parisneo/lollms-webui version 9.3 allows attackers to bypass intended access restrictions and execute arbitrary code.CVE-2024-235909.1Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are recommended to upgrade CVE-2024-235912.3ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an at CVE-2024-235926.3An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with p CVE-2024-235936.7A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2 CVE-2024-235946.4A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operatin CVE-2024-235974.3Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, un CVE-2024-235997.9Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial o