Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-0276

HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Modern Client Management

Default version status: unaffected

  • <=3.3affected

References