CVE-2026-21808
HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
- State
- Published
- Severity
- 4.1 Medium
- Published
- Aug 26, 2026
- Updated
- Aug 27, 2026
- Reserved
- Jan 5, 2026
Description
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.1 Medium | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N | HCL |
Weaknesses
- CWE-532 Insertion of sensitive information into log file
Affected Products
| Product | Versions |
|---|---|
BigFix Quantum Risk AnalyzerHCLSoftware |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.