CVE-2026-79899
HighCVSS 7.9Summary
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.
Risk Assessment
Risk of disclosure of sensitive cryptographic material (CA secrets, host private keys) to a local user, potentially leading to compromise of PKI trust and control over certificates.
Recommendation
Update Fortra BoKS Manager to a patched version. Additionally, set restrictive permissions on the BOKS_tmp directory and monitor access to temporary files.
Other vulnerabilities in Fortra BoKS Manager
See all- CVE-2026-79896High
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux.
- CVE-2026-79898Critical
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master.
- CVE-2026-9863High
Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.
Original NVD description (English source)
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS