CVE-2025-0274: HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0274?
CVE-2025-0274 has been classified as a high severity vulnerability due to improper access control allowing unauthorized user access.
How do I fix CVE-2025-0274?
To fix CVE-2025-0274, update HCL BigFix Modern Client Management to version 3.4 or later.
Which versions of HCL BigFix Modern Client Management are affected by CVE-2025-0274?
CVE-2025-0274 affects HCL BigFix Modern Client Management versions 3.3 and earlier.
What are the potential impacts of CVE-2025-0274?
The potential impact of CVE-2025-0274 includes unauthorized access to a small subset of endpoint actions that may lead to exposure of internal functions.
Who is at risk from CVE-2025-0274?
Organizations using HCL BigFix Modern Client Management versions 3.3 and earlier are at risk from CVE-2025-0274.