6.5Mittel
CVE-2026-56592HCL BigFix Service Management is affected by multiple security vulnerabilities.
Beschreibung
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Schwachstellentyp (CWE):
CWE-307
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCL Software | HCL BigFix Service Management | v27 | |
| hcltech | bigfix service management | 23 |
Referenzen und Patches
CPE-Treffer (NVD) (2)
cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*