CVE Catalog
CVE-2025-15634
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.
Risk Assessment
Risk of leaking sensitive environmental configuration data that could be used for further attacks.
Recommendation
Update HCL BigFix WebUI to the latest version containing the authorization fix.
Original NVD description (English source)
A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.