medium5.3
CVE-2025-0275
HCL BigFix Mobile 3.3 and earlier is affected by improper access control.
Impact
HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Mobile | through 3.3 |
| Hcltech | Bigfix Modern Client Management | before 3.4 |