Improper Access Control in HCL BigFix Mobile by HCL Technologies

CVE-2025-0275

What is CVE-2025-0275?

HCL BigFix Mobile versions 3.3 and earlier are susceptible to improper access control, allowing unauthorized users to gain access to a limited subset of endpoint actions. This vulnerability exposes sensitive internal functions, potentially compromising the integrity and confidentiality of the mobile environment. It is crucial for organizations using this application to evaluate their security posture and implement necessary safeguards to mitigate the risks associated with unauthorized access.

References