Vulnerabilities > Hcltech > Bigfix Platform > 9.5.12.68

DATE CVE VULNERABILITY TITLE RISK
2020-12-16 CVE-2020-14248 Cleartext Transmission of Sensitive Information vulnerability in Hcltech Bigfix Platform
BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
network
low complexity
hcltech CWE-319
5.3
5.3
2020-07-16 CVE-2020-4095 Insufficiently Protected Credentials vulnerability in Hcltech Bigfix Platform
"BigFix Platform is storing clear text credentials within the system's memory.
local
low complexity
hcltech CWE-522
6.0
6.0