How to use BigFix Inventory to discover endpoints that may be affected by urllib3 vulnerability (CVE-2025-66471)

Usage and Config BFI
1

The following versions of urllib3 library of python are affected by the mentioned CVE:
CVE-2025-66471: urllib3 versions >=1.0.0 and <2.6.0. For more details refer : Urllib3-CVE-issue

BigFix Inventory helps you to discover if the affected and the safe versions of urllib3 library installed on your environment.

  • The signature with component name “urllib3 CVE-2025-66471” and version “0.AFFECTED” specifically targets the versions of urllib3 affected by the mentioned CVE. You can find the signature at the following URL.

    https://bigfix.me/signature/details/1268

  • The signature with component name “urllib3 CVE-2025-66471” and version “0.SAFE” specifically targets the end points where vulnerability has been removed by applying patch or the version already installed is outside of the range specified in CVE. You can find the signature at the following URL.

    https://bigfix.me/signature/details/1269

The process for using CIT custom signatures:

  1. Download the signature file from the URL provided under every type of discovery described.
  2. Login to BigFix Inventory.
  3. Go to Management → Catalog Customization.
  4. Import the file with the custom signature.
  5. Run an import process to allow the BFI server to process the signature and initiate the signature propagation to the endpoints.
  6. Run a software scan on the endpoints.
  7. Ensure the Upload Software Scan Result fixlet is running.
  8. Run an import process to import the scan results.
  9. Verify the results on the reports.

Bigfix Inventory Team

2 Likes