CVE-2026-108013

CVE-2026-108013 · HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520.

CVSS 6.8 · Moyenne · EPSS 0,2%

Publication

2026-10-24T06:23:11.930Z

Mise à jour

2026-10-24T06:23:11.930Z

Vérifiez votre serveur →