CVE-2026-67171: HCL BigFix Service Management is affected by multiple security vulnerabilities.
Published Oct 1, 2026
·Updated
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks.
Affected Software
1 affected component
HCL BigFix Service Management
Event History
Oct 1, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit the exposed endpoint?
The vector is network-based and requires no privileges or user interaction, so any attacker able to reach the exposed API endpoint could retrieve the disclosed internal database information.
2
What is the likely impact of the disclosed information?
The disclosed information concerns internal database details. It could help an attacker prepare or target subsequent attacks against the database, while the provided severity vector indicates low confidentiality impact and no direct integrity or availability impact.