CVE-2021-27780 The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment

Description

The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.

Affected products and versions

Product	Affected versions	Fixed in
HCL BigFix Mobile / Modern Client Management	Versions not published

Other CVEs of HCL BigFix Mobile / Modern Client Management

The 4 CVEs of HCL BigFix Mobile / Modern Client Management →

CVE-2023-28025 Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert… 6.6 Medium CVE-2021-27781 The Master operator may be able to embed script tag in HTML with alert pop-up display cookie 6.6 Medium CVE-2021-27783 User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed 6.8 Medium