CVE-2026-21767

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

bigfix platform のその他の脆弱性

• CVE-2026-21765高 7.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows …
• CVE-2024-42193高 8.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario…
• CVE-2024-42200中 5.4HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
• CVE-2024-42189中 6.5HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.
• CVE-2024-30117中 5.3A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances…