CVE Feed

    Dashboard / CVE / CVE-2022-38659

    CVE-2022-38659

    In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

    Published:Dec 17, 2022
    Last Modified:Apr 17, 2025
    EPS:Dec 17, 2022
    EPSS Score:0.00022
    CVSS Score:6

    Affected Products

    Vendor
    Hcltech
    Product
    Bigfix Platform
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-326 Inadequate Encryption Strength

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-112 Brute Force
    CAPEC-192 Protocol Analysis
    CAPEC-20 Encryption Brute Forcing

    Related CVEs

    CVE-2026-21840 (CVSS 3.1) — HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through car…
    CVE-2026-21767 (CVSS 4) — HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access s…
    CVE-2026-21765 (CVSS 8.8) — HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptograp…
    CVE-2024-42193 (CVSS 2.1) — HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certifi…
    CVE-2024-42189 (CVSS 5.6) — HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validat…
    CVE-2024-42200 (CVSS 4.8) — HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially we…
    CVE-2024-30117 (CVSS 2.5) — A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct…
    CVE-2024-23556 (CVSS 5.9) — SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability. …
    CVE-2024-23554 (CVSS 5.7) — Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Ex…
    CVE-2024-23583 (CVSS 6.7) — An attacker could potentially intercept credentials via the task manager and perform unauthorized access to th…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High