5.3
Moyenne
CVE-2025-52621 HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
Description
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix SaaS Remediate 8.1 | premières → < 8.1.14 | 8.1.14 |
Autres CVE de BigFix SaaS Remediate
Les 5 CVE de BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Moyenne
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Moyenne
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Moyenne
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Moyenne