[UPDATE] [hoch] HCL BigFix Service Management: Mehrere Schwachstellen

Imported from official source

Announcement

Cybersecurity Classified by Officially

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Sicherheitsmaßnahmen zu umgehen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Daten offenzulegen oder zu manipulieren, SQL-Injection- oder Cross-Site-Scripting-Angriffe durchzuführen oder serverseitige Request-Forgery- sowie Brute-Force- und Session-Hijacking-Angriffe auszuführen.

Source: CERT-Bund (BSI) Warn- und Informationsdienst.

Read the original at the source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3461

Officially imported this from CERT-Bund (BSI) Warn- und Informationsdienst’s own source. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
CERT-Bund (BSI) Warn- und Informationsdienst — imported from official source
Official source
https://wid.cert-bund.de/content/public/securityAdvisory/rss RSS
Imported
October 06, 2026 12:33
Versions
1 recorded
Identity
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3461

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.