CVE-2025-15634

HCL BigFix WebUI is affected by a missing authorization vulnerability PUBLISHED

Description (CNA)

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / BigFix WebUI	affected all versions

CWE

CWE-862

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130587

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.