5.3
Medium
CVE-2025-0274 HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control
Description
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Modern Client Management 3.3 | earliest → 3.3 | No fix stated |