CVE-2026-21808

Published: Aug 26, 2026Modified: Aug 28, 2026

4.1

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.5 / Impact: 3.6

Source: psirt@hcl.com (Secondary)

Description

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133289

Source: psirt@hcl.com

Timeline

No history available yet.