CVE-2025-0275
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-10-16
Last updated on: 2025-10-21
Assigner: HCL Software
Description
Description
HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hcltech | bigfix_mobile | to 3.3 (inc) |
| hcltech | bigfix_modern_client_management | to 3.4 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in HCL BigFix Mobile 3.3 and earlier involves improper access control, where unauthorized users can access a limited set of endpoint actions and potentially some internal functions that should be restricted.
How can this vulnerability impact me? :
The impact of this vulnerability is that unauthorized users might perform certain actions on endpoints or access select internal functions, which could lead to limited disruption or unauthorized activity, though it does not affect confidentiality or integrity.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70