Skip to content
OpenAdvisories
High WID-SEC-2026-0960 2 CVEs

HCL BigFix Platform: Mehrere Schwachstellen

Published Apr 1, 2026 · Updated Apr 1, 2026 · de-DE

Vendor: HCL Software Product: BigFix Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in HCL BigFix Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 2

  • High 8.8
    CVE-2026-21765

    HCL BigFix Platform is affected by insecure permissions on private cryptographic keys

    HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.

    HCL Software BigFix Platform
  • Medium 4.0
    CVE-2026-21767

    HCL BigFix Platform is affected by insufficient authentication

    HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the application without proper authentication.

    HCL Software BigFix Platform

Revision history

  1. #1

    Initiale Fassung

References