Skip to content
Sign in
5.3 Medium

CVE-2025-0275 HCL BigFix Mobile 3.3 and earlier is affected by improper access control

Description

HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.

Affected products and versions

Product Affected versions Fixed in
BigFix Mobile 3.3 earliest → 3.3 No fix stated

Other CVEs of BigFix Mobile

The 3 CVEs of BigFix Mobile →
CVE-2025-0277 HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP) 6.5 Medium CVE-2021-27782 HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced 5.4 Medium
Track this CVE