Sensitive Information Disclosure in HCL BigFix SaaS Authentication Service

CVE-2025-52619

What is CVE-2025-52619?

The HCL BigFix SaaS Authentication Service is prone to a sensitive information disclosure flaw. This vulnerability arises from specific conditions where error messages inadvertently reveal sensitive version information about the underlying platform. Such disclosures can potentially aid attackers in executing targeted cyberattacks. Organizations using this service should review their configurations and monitor for any unintended version information leaks to mitigate risks associated with this vulnerability.

References