CVEvulnerability

CVE-2026-67080

6.5 MEDIUM Published 2026-10-28 Modified 2026-10-28 Official page ↗
Status
Deferred
Published
2026-10-28
Last modified
2026-10-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-209, CWE-391, CWE-755

Description

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

Related

Weakness · not in database (1)

Weakness · CWE (2)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness

References