Description (CNA)
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HCL Software / BigFix Platform | affected 9.5 - 9.5.18, 10 - 10.0.5 |
CWE
CWE-269
References
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098116
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0023/MNDT-2022-0023.md
ADP enrichment
No English description supplied.