CVE-2022-44758: Hcltech Bigfix Insights For Vulnerability Remediation

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.

Affected products

• Hcltech Bigfix Insights For Vulnerability Remediation: before 2.0.3 (fixed in 2.0.3)

Published 2023-10-11. Last modified 2026-06-17.