HCL BigFix Server 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)

The version of HCL BigFix Server installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store: - BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before...

HCL BigFix Server 11.0.x < 11.0.6 Insufficient Authentication (KB0129906)

The version of HCL BigFix Server installed on the remote host is 11.0.x prior to 11.0.6. It is, therefore, affected by an insufficient authentication vulnerability: - HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the...

HCL BigFix Server Improper Access Restrictions (KB0122906)

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported versio...

HCL BigFix Server 10.0.x < 10.0.13 / 11.0.x < 11.0.4 Multiple Vulnerabilities (KB0120585)

The version of HCL BigFix Server installed on the remote host is 10.0.x prior to 10.0.13 or 11.x prior to 11.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the KB0120585 advisory. - HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in it...

HCL BigFix Server 9.5.x < 9.5.25 / 10.0.x < 10.0.12 / 11.0.x < 11.0.3 DLL Hijacking (KB0116659)

The version of HCL BigFix Server installed on the remote host is 9.5.x prior to 9.5.25, 10.0.x prior to 10.0.12 or 11.x prior to 11.0.3. It is, therefore, affected by a DLL hijacking vulnerability as referenced in the KB0116659 advisory, where a dynamic search for a prerequisite library could all...

HCL BigFix Server Installed (Windows)

Binary data hclbigfixserverwininstalled.nbin...

HCL BigFix Server 9.5.x < 9.5.24 / 10.0.x < 10.0.10 / 11.0.x < 11.0.1 Multiple Vulnerabilities (KB0110209)

The version of HCL BigFix Server installed on the remote host is 9.5.x prior to 9.5.24, 10.0.x prior to 10.0.10 or 11.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the KB0110209 advisory. - Heap-based buffer overflow vulnerability in the SOCKS5 proxy...