Hcl-Bigfix

HCL BigFix is affected by multiple security vulnerabilities (CVE-2024-22248, CVE-2024-22249, CVE-2024-22250, CVE-2024-22251, CVE-2024-22252) that could allow a remote attacker to conduct cross-site scripting (XSS), disclose sensitive information, or manipulate data.

HCL BigFix Platform is vulnerable to insecure permissions on private cryptographic keys, where keys on a Windows host may have overly permissive file system permissions, potentially leading to unauthorized access and privilege escalation.