Home

Description

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

PUBLISHED Reserved 2025-06-18 | Published 2025-08-15 | Updated 2025-08-18 | Assigner HCL




MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-346 Origin Validation Error

Product status

Default status
unaffected

< 8.1.14
affected

References

support.hcl-software.com/...rticle&sysparm_article=KB0123330

cve.org (CVE-2025-52621)

nvd.nist.gov (CVE-2025-52621)

Download JSON