CVE-2026-21765 — HCL BigFix Platform is affected by insecure permissions on private cryptographic keys

CVE-2026-21765

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys PUBLISHED

Description (CNA)

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / BigFix Platform	affected 11.0.0 - 11.0.5

CWE

CWE-732, CWE-276

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.