medium5.3
CVE-2025-0274
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control.
Impact
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Mobile | through 3.3 |
| Hcltech | Bigfix Modern Client Management | before 3.4 |