CVE-2021-27756
High
Description
"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."
SeverityHigh
CVSS7.5
Exploit probability—
ProductHcltech Bigfix Compliance
PublishedMar 4, 2022
First seenMar 4, 2022
How to fix
Update
- hcltech bigfix_compliance2.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hcltech bigfix_compliance | 2.0 ≤ v < 2.0.6 | 2.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.