CVE-2022-42451: Hcltech Bigfix Patch Management

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user.

Affected products

• Hcltech Bigfix Patch Management: before 1055 (fixed in 1055)

Published 2023-10-11. Last modified 2026-06-17.