PT-2025-33512 · Hcl · Hcl Bigfix Saas

Published 2025-08-15 · Updated 2025-10-29 · CVE-2025-52621

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: HCL BigFix SaaS (affected versions not specified)

Description: HCL BigFix SaaS Authentication Service is susceptible to cache poisoning. The HTTP responses from BigFix SaaS include the Origin header, and its presence, combined with an unvalidated reflection of the Origin header value, creates a potential for cache poisoning.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-52621

Affected Products

Hcl Bigfix Saas

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-52621 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52621 · Vendor Advisory
• https://t.me/cveNotify/132555 · Telegram Post
• https://twitter.com/CVEnew/status/1956654803502932389 · Twitter Post
• https://t.me/CVEtracker/30160 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1956504458470240282 · Twitter Post
• https://t.me/cveNotify/140882 · Telegram Post