CVE-2025-0274 — HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control

CVE-2025-0274

HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control PUBLISHED

Description (CNA)

HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Modern Client Management	affected <=3.3

CWE

CWE-306

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124512

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.