HCL BigFix Platform Insufficient Authentication Vulnerability

Vulnerability

A vulnerability exists in HCL BigFix Platform versions 11.0.0 through 11.0.5, allowing users to access sensitive areas of the application without proper authentication. This insufficient authentication could lead to unauthorized access and potential manipulation of application data or functionality.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive areas of the application, potentially allowing users to manipulate application data or functionality without proper authentication.

Remediation

Users can upgrade to BigFix Platform version 11.0.6 to address this vulnerability. Instructions for upgrading are available through the HCL BigFix Console.

Added: Apr 2, 2026, 12:20 AM
Updated: Apr 2, 2026, 12:20 AM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
5.0
exploitability
3.8
remediation
7.7
relevance
5.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.