Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2026-21785

HCL BigFix Remote Control Server WebUI is affected by a misconfigured Content Security Policy

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define directives without fallbacks, allowing attackers to bypass intended security restrictions and load unauthorized resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware BigFix Remote Control Server

Default version status: unaffected

  • <= versions 10.1.0.0442affected

References