Insecure Directives in Content Security Policy Affecting HCL BigFix Mobile

CVE-2025-0277

What is CVE-2025-0277?

HCL BigFix Mobile versions 3.3 and earlier are susceptible to vulnerabilities associated with inadequate Content Security Policy (CSP) directives. These insecure directives can allow an attacker to manipulate user interactions by failing to sufficiently restrict the origins of scripts and other types of content. This could lead to malicious activities if users are tricked into executing unintended actions within the application, underscoring the necessity for rigorous security practices in web application development.

References