Description
Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix Remote Control | <=10.1.0.0248 | — |
Advisories 1
- WID-SEC-2025-1674 HCL BigFix Remote Control Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jul 29, 2025