Description
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix Modern Client Management | <=3.3 | — |
Advisories 1
- WID-SEC-2025-2314 HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 15, 2025