Skip to content
OpenAdvisories
Medium WID-SEC-2025-2314 2 CVEs

HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Oct 15, 2025 · Updated Oct 15, 2025 · de-DE

Vendor: HCL Software Product: BigFix Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-0274

    HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control

    HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.

    HCL Software BigFix Modern Client Management
  • Medium 5.3
    CVE-2025-0275

    HCL BigFix Mobile 3.3 and earlier is affected by improper access control

    HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.

    HCL Software BigFix Mobile

Revision history

  1. #1

    Initiale Fassung

References