CVE-2021-27756

2022-03-0421:18:06

HCL

www.cve.org

tls-rsa cipher

bigfix compliance

v2.0.5

passive traffic recording

secure ciphers

decryption

EPSS

0.002

Percentile

51.4%

JSON

“TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.”

CNA Affected

[
  {
    "product": "\"BigFix Compliance Server\"",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "\"BigFix Compliance Server 2.0 - 2.0.5\""
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0096977

EPSS

0.002

Percentile

51.4%

JSON

Related for CVELIST:CVE-2021-27756