5.3
Medium
CVE-2025-52619 HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
Description
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix SaaS Remediate 8.1 | earliest → < 8.1.14 | 8.1.14 |
Other CVEs of BigFix SaaS Remediate
The 5 CVEs of BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Medium
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Medium
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Medium
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Medium