PT-2022-9850 · Hcl+1 · Bigfix Platform

Published 2022-05-06 · Updated 2022-05-18 · CVE-2021-27761

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns weak web transport security, specifically weak TLS, which may allow an attacker to decrypt data using attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2021-27761

Affected Products

Bigfix Platform

References · 5

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098116 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27761 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27761 · Vendor Advisory
• https://t.me/cibsecurity/42157 · Telegram Post
• https://t.me/cvenotify/29817 · Telegram Post