VULNERABILITY INTELLIGENCE
CVE-2022-44757
CVSS score6.5 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2023-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.
Weakness classification
- nvd@nist.gov: CWE-522
Primary references
- psirt@hcl.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory