Critical Vulnerabilities Patched in HCL BigFix Platform (heise.de)

• Remediation of critical flaws in HCL BigFix software
• Resolution of insecure cryptographic key management
• Immediate patching advised for all operational instances

"HCL has released urgent security patches to address two vulnerabilities within the BigFix endpoint management platform. The most severe issue involved the insecure storage of cryptographic keys, creating a significant risk for attackers to gain unauthorized access or manipulate managed endpoints. Given the platform's high level of administrative privilege within corporate and government networks, these vulnerabilities pose a major risk to digital sovereignty and infrastructure integrity. Users are advised to upgrade immediately to mitigate the risk of systemic exploitation."