Kritik CVSS 9.8
CVE-2026-56592: Bigfix Service Management: güvenlik açığı
Açıklama (NVD)
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Özet bilgiler
- Ürün
- Hcltech Bigfix Service Management
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,29 (yüzdelik 21)
- CWE
- CWE-307
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| hcltech-bigfix-service-management | 23 | 23 | — |
| hcltech-bigfix-service-management | 27 | 27 | — |