CVE-2025-52647: HCL BigFix WebUI is affected by a host header poisoning vulnerability
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52647?
CVE-2025-52647 is considered a medium severity vulnerability due to its potential for exploitation through Host Header Poisoning Attacks.
How do I fix CVE-2025-52647?
To fix CVE-2025-52647, ensure that your BigFix WebUI application is updated to the latest version that addresses this vulnerability.
What are the risks associated with CVE-2025-52647?
The risks of CVE-2025-52647 include unauthorized access to web application resources and potential server-side request forgery implications.
Which software is affected by CVE-2025-52647?
CVE-2025-52647 affects the HCL BigFix WebUI application.
What is Host Header Poisoning in relation to CVE-2025-52647?
Host Header Poisoning in the context of CVE-2025-52647 occurs when the application improperly processes HTTP headers, leading to possible manipulation of server behavior.