CVE-2025-0275: HCL BigFix Mobile 3.3 and earlier is affected by improper access control
Published Oct 16, 2025
·Updated
HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Affected Software
3 affected components
HCL BigFix Mobile<3.3
hcltech Bigfix Mobile<=3.3
hcltech Bigfix Modern Client Management<3.4
Event History
Oct 16, 2025
CVE Published
via MITRE·05:14 AM
Data Sourced
via MITRE·05:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-0275?
CVE-2025-0275 is considered a medium severity vulnerability due to improper access control in HCL BigFix Mobile.
2
How do I fix CVE-2025-0275?
To fix CVE-2025-0275, upgrade HCL BigFix Mobile to version 3.4 or later.
3
Who is affected by CVE-2025-0275?
CVE-2025-0275 affects users of HCL BigFix Mobile version 3.3 and earlier.
4
What type of vulnerability is CVE-2025-0275?
CVE-2025-0275 is classified as an access control vulnerability.
5
What can happen if CVE-2025-0275 is exploited?
If exploited, CVE-2025-0275 could allow unauthorized users to access internal functions of HCL BigFix Mobile.