HCL BigFix: Attackers can access data in the file system
The HCL BigFix endpoint management platform is vulnerable. Security updates are available.
(Image: Artur Szczybylo/Shutterstock.com)
Attackers can exploit a total of seven vulnerabilities in HCL BigFix, potentially compromising computers in the worst-case scenario.
As indicated in an advisory, the vulnerabilities are in the components Axios, jsPDF, and React Router, which the endpoint management platform uses. Most and most dangerous vulnerabilities are in jsPDF.
Malware attacks possible
This allows attackers to access data in the file system (CVE-2025-68428 "critical") or embed malware in PDFs that executes when opened (CVE-2026-24737 "high"). So far, there are no reports of attackers exploiting the vulnerabilities.
Videos by heise
The developers assure that HCL BigFix has been repaired in version 1.0.2 update 2.
(des)
