HCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack

CVE-2021-27782

What is CVE-2021-27782?

A security flaw in HCL BigFix Mobile allows attackers to execute brute-force attacks on the Admin and Config UI passwords, as users are not locked out after multiple invalid attempts. This increases the risk of unauthorized access to sensitive management tools. Organizations using HCL BigFix Mobile should implement immediate remediation measures to mitigate this vulnerability and secure their administrative interfaces.

References