CVE-2026-67106
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@hcl.com (Secondary)
Description
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks.
Affected (1)
Products: Hcltech: Bigfix Service Management
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 27 |
Related CWEs
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
References (1)
Source: psirt@hcl.com
Vendor Advisory
Timeline
No history available yet.