DeutschShown in its original language — a full translation is planned for a future version.
HCL BigFix Compliance (Ruby): Mehrere Schwachstellen
view advisory published 2026-06-28
Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Compliance ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-42258US | medium5.3 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable… | ||||
| CVE-2026-42257US | critical9.8 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw stri… | ||||
| CVE-2026-42256US | medium6.5 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4,… | ||||
| CVE-2026-42246US | high7.4 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cau… | ||||
| CVE-2026-42245US | high7.5 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time… | ||||
| CVE-2026-41493US | high7.5 | — | ||
YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allo… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-33515 vom 2026-07-07external
- Red Hat Security Advisory RHSA-2026:33512 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33514 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33515 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33540 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33551 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33552 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33565 vom 2026-06-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan