Skip to content
OpenAdvisories
Medium · 6.7 CVE-2021-27765 EUVD-2021-14506GHSA-p5fr-hfcw-6vff

HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability

Published May 6, 2022 · Updated Sep 16, 2024 · Assigned by HCL

Description

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed.

Affected products

VendorProductAffectedFixed
HCL Software BigFix Platform 9.5 - 9.5.18, 10 - 10.0.5 —

References