HCL BigFix Modern Client Management (MCM) and BigFix Mobile: Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen

Summary

Product

Vulnerabilities 2

• Medium 6.5
  CVE-2025-0276

  HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)

  HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and othe…

  HCL Software BigFix Modern Client Management
  Oct 16, 2025
• Medium 6.5
  CVE-2025-0277

  HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)

  HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

  HCL Software BigFix Mobile
  Oct 16, 2025

Revision history

1. 2025-10-16 #2

   Referenz(en) aufgenommen: EUVD-2025-34727, EUVD-2025-34725

2. 2025-10-15 #1

   Initiale Fassung

References

• HCL Security Bulletin vom 2025-10-15
  https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513