8.8Alta

CVE-2026-21765HCL BigFix Platform is affected by insecure permissions on private cryptographic keys

HCLSoftware BigFix Platform Publicada: (hace 7 meses)

Descripción

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.

Debilidad (CWE): CWE-732CWE-276

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
HCLSoftware BigFix Platform 11.0.0 - 11.0.5
hcltech bigfix platform 11.0.0 – ≤ 11.0.5

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:* ≥ 11.0.0 ≤ 11.0.5