3.1Düşük
CVE-2026-56597HCL BigFix Service Management is affected by multiple security vulnerabilities.
Açıklama
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| HCL Software | HCL BigFix Service Management | v27 | |
| hcltech | bigfix service management | 23 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*