CVE-2024-30117: Hcltech Bigfix Platform

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.

Affected products

  • Hcltech Bigfix Platform: from 9.5, before 9.5.25 (fixed in 9.5.25); from 10.0.0, before 10.0.12 (fixed in 10.0.12); from 11.0.0, before 11.0.3 (fixed in 11.0.3)

Published 2024-10-14. Last modified 2026-06-17.