8.8High
CVE-2026-21765HCL BigFix Platform is affected by insecure permissions on private cryptographic keys
Description
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| HCLSoftware | BigFix Platform | 11.0.0 - 11.0.5 | |
| hcltech | bigfix platform | 11.0.0 – ≤ 11.0.5 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*≥ 11.0.0 ≤ 11.0.5