{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "HCL Software BigFix Platform: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/hcl-software--bigfix-platform/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/hcl-software--bigfix-platform/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-108013/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-108013/",
   "title": "CVE-2026-108013 · HCL Software BigFix Platform · disclosed",
   "content_text": "BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520.",
   "date_published": "2026-10-24T06:23:11Z"
  }
 ]
}