CVE-2026-67171

medium

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90903

Details

Source: Mitre, NVD

Published: 2026-10-01

Updated: 2026-10-06

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N