An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed.

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed.